RubyFlow : The Ruby Community Blog

Home   Submit   Sign Up   Log In   leaders   Twitter   RSS Feed  
 

Using Authority when you don't have a model

Authority provides a sensible, ORM-neutral way to authorize actions on your Rails models.

But what if you need to authorize something for which there is no model, like access to a stats page? The new "generic `can?`" feature takes care of that nicely -- just don't overuse it.

Comments

Post a Comment

Comment abilities for non registered users are currently deactivated, pending time to add a proper CAPTCHA to solve the escalating spam problem. Sorry!