Forum: Ruby on Rails Authorization system recommendations

Announcement (2017-05-07): www.ruby-forum.com is now read-only since I unfortunately do not have the time to support and maintain the forum any more. Please see rubyonrails.org/community and ruby-lang.org/en/community for other Rails- und Ruby-related community platforms.
Evan (Guest)
on 2009-02-27 19:25
(Received via mailing list)
Good morning.

Our application has grown to the point where a more robust
authorization system is needed. What Rails plugins or Ruby gems do you
recommend?

Our needs include:

- defining multiple user roles which can use parts of the application
in different ways
- easy maintenance (preferably no generators or systems requiring
manual code updating after initial install)

We are already using authlogic for authentication.

Thanks.

Evan
Adriano (Guest)
on 2009-02-28 00:42
(Received via mailing list)
Hello Evan,

I've posted a similar question few days ago (
http://groups.google.com/group/rubyonrails-talk/t/...
). Unfortunately there weren't any answers yet. So, by now I recommend
you to take a look at the "rails-authorization-plugin" from
Writertopia ( http://www.writertopia.com/developers/authorization ),
it can can supply your needs for sure.

Last but not least, I also suggest you to keep looking at Ben
Johnson's site where recently has been posted some exciting news about
the future of Authlogic (http://www.binarylogic.com/2009/2/25/the-
future-of-authlogic-add-ons). There you'll see something about the add-
on nr. 5. Maybe you can wait for its release. I confess I'm looking
forward to it.

Regards,

Adriano
Evan (Guest)
on 2009-02-28 01:16
(Received via mailing list)
Adriano,

Thanks for pointing out your post. I'm looking at the Authorization
plugin now.

After several more hours of research I've found a couple of resources
that might help you, as well.

A good, comparative overview of lots of authorization plugins
http://steffenbartsch.com/blog/2008/08/rails-autho...

Declarative Authorization plugin – well-designed authorization system
that abstracts authorization declarations from application code
http://github.com/stffn/declarative_authorization/tree

Evan
This topic is locked and can not be replied to.