Using Authority when you don't have a model
Authority provides a sensible, ORM-neutral way to authorize actions on your Rails models.
But what if you need to authorize something for which there is no model, like access to a stats page? The new “generic can?
” feature takes care of that nicely – just don’t overuse it.
Post a comment