[Rails] Re: Rails authorization system

2012-08-14 Thread Andrew Vit
Note that Devise and CanCan are orthogonal... you can use both, or either. Authentication is something that doesn't change a lot after it's set up, so you might write it once and forget about it. It's good if you want to keep it simple. I suppose you might decide to support a new mechanism like

[Rails] Re: Rails Authorization plugins

2010-05-04 Thread Marnen Laibow-Koser
jmamma wrote: > We are evaluating authorization plugins for rails and I wanted to > address the group for some feedback. > > The two we are looking at are: cancan by Ryan Bates and > declarative_authorization. > I've never used either of these, but I've been working with DocSavage's rails_auth

[Rails] Re: Rails Authorization plugins

2010-05-02 Thread Michael Schuerig
On Sunday 02 May 2010, jmamma wrote: > The two we are looking at are: cancan by Ryan Bates and > declarative_authorization. I had the same candidates recently and decided to use CanCan. I think that they are very similar in spirit, declarative_authorization is far more elaborate and consequentl

[Rails] Re: Rails Authorization and Security question

2009-07-24 Thread erwin
I am using Authlogic for authentification and rails_authorization_plugin for authorization when needed, at the beginning of a controller I write before_filter :require_user # can be also require_no_user to exclude multi-sessions from same user before_filter :check_authorization, :except

[Rails] Re: Rails Authorization and Security question

2009-07-24 Thread Rilindo Foster
Hey, that is easier. I'll have to save this. Thanks! On Jul 24, 2009, at 8:54 PM, James Englert wrote: > It would probably be easier to prevent users from viewing those > pages using a filter. If you are using AuthenticatedSystem, you > might be able to tap into the login_required function.

[Rails] Re: Rails Authorization and Security question

2009-07-24 Thread James Englert
It would probably be easier to prevent users from viewing those pages using a filter. If you are using AuthenticatedSystem, you might be able to tap into the login_required function. An example filter would be like <.. in your controller class ..> before_filter :login_required, :except => [:show

[Rails] Re: rails-authorization-plugin

2009-07-01 Thread daociyiyou
Thank you! I am reading it now. On 7月1日, 上午4时23分, Colin Law wrote: > 2009/6/30daociyiyou: > > > > > I am sure i have configured the plugin well,but not know how to use it > > properly. > > first: set role using has_role or accept role method. > > second:permit or permit? methods is used to check

[Rails] Re: rails-authorization-plugin

2009-06-30 Thread Colin Law
2009/6/30 daociyiyou : > > I am sure i have configured the plugin well,but not know how to use it > properly. > first: set role using has_role or accept role method. > second:permit or permit? methods is used to check or set role? > I think they are used for checking,if true for a specific role,ru

[Rails] Re: rails-authorization-plugin

2009-06-30 Thread daociyiyou
The most funny answer i ever had. Thanks,Colin Law --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk@googlegroups.com To unsubscribe fro

[Rails] Re: rails-authorization-plugin

2009-06-30 Thread Colin Law
2009/6/30 daociyiyou : > > anyone help? Three hours is not really long enough to wait, a third of the world is asleep and another third is working. Most of the rest don't know what RoR is which leaves us with me apparently, and I don't know the answer. With a little patience someone who does kn

[Rails] Re: rails-authorization-plugin

2009-06-30 Thread daociyiyou
anyone help? --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk@googlegroups.com To unsubscribe from this group, send email to rubyonrai

[Rails] Re: Rails authorization

2008-11-11 Thread [EMAIL PROTECTED]
main paginate: http://wiki.rubyonrails.com/rails/pages/Authentication Bigger aps: http://wiki.rubyonrails.com/rails/pages/restful_authentication smaller aps where REST is not fesiable: http://wiki.rubyonrails.com/rails/pages/Acts_as_authenticated regards svend On Nov 11, 5:34 pm, Nick Hoffman

[Rails] Re: Rails authorization

2008-11-11 Thread Nick Hoffman
Daniel Lopes wrote: > Hello, anyone know who is the best plug-in for authorization in rails? > > I found this link > http://www.vaporbase.com/postings/Authorization_in_Rails > but is old, maybe today we have something better. > > Thanks. There's no "best". Every situation is different. You nee