Does Node.js/Express/Passport have an authorization module like CanCan for Rails?

Once a user is Authenticated, I would like a way to set the restrictions on what a user can view, edit and delete. Specifically, unless they are an Admin, they can view, edit and delete ONLY files that they own. I've seen some examples with EveryAuth and Ability.js, just wondering if there is an equivalent for those using Passport.js