Skip to Content
DocsNestJS CRUD AutomatorAPI ReferenceDecoratorsAuthorization DecoratorsAuthorization Decorators

Authorization Decorators

Authorization decorators register policy classes that run before any auto-generated route executes. Policies allow entity-specific RBAC, multi-tenant filters, and custom assertions without touching controllers.

Available decorators

DecoratorPurposeReference
@ApiAuthorizationPolicyRegisters a policy class with optional priority, ID, and description metadata./docs/nestjs-crud-automator/api-reference/decorators/api-authorization/api-authorization-policy

Typical workflow

  1. Implement a policy by extending ApiAuthorizationPolicyBase.
  2. Decorate the class with @ApiAuthorizationPolicy, providing the entity and optional metadata.
  3. Import ApiAuthorizationModule so the policy registry discovers and executes policies for each secured controller.
Last updated on
Decorators@ApiAuthorizationPolicy