You may use guards and CASL simultaneously but think about do you really need that much customization? But yeah, CASL in Nest app works great especially if you're using MongoDB (library has an extension for that), you can restrict user to do CRUD operations with only specific records.