# Admin Sections & Roles

**URL:** <https://www.ruby-forum.com/t/admin-sections-roles/185796>\
**Category:** Rails\
**Created:** [March 26, 2010, 7:23am UTC](https://www.ruby-forum.com/t/admin-sections-roles/185796 "2010-03-26T07:23:04Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![brianp](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/94ad74/32.png) [@brianp](https://www.ruby-forum.com/u/brianp)\
**Post date:** [March 26, 2010, 7:23am UTC](https://www.ruby-forum.com/t/admin-sections-roles/185796/1 "2010-03-26T07:23:04Z")

</div>

Hey everyone.

In the last app I made it was fairly straight forward. Front end for  
users, admin area for admin.

This app is a little more complicated and I wanted your opinions on  
the best strategy.

The site will have Site Admin (myself and moderators.)

Dealers may sign up to the site and have there own  
“Storefronts.” (store fronts may have only one owner or master admin  
but multiple users for maintenance)

the Dealers require a smaller admin section for there storefront.

Customers may come and browse the entire site including all available  
Storefronts.

Would it be better to run two different logins with 2 different user  
tables? SiteWideAdmin and Dealers. Or one master login with one user  
table and allot of permissions & roles spread all over ?

Cheers,  
brianp

---

<div class="post-metadata">

**Author:** ![brianp](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/94ad74/32.png) [@brianp](https://www.ruby-forum.com/u/brianp)\
**Post date:** [March 26, 2010, 10:12am UTC](https://www.ruby-forum.com/t/admin-sections-roles/185796/2 "2010-03-26T10:12:10Z")

</div>

On 26 March 2010 06:22, brianp [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> Dealers may sign up to the site and have there own  
> table and allot of permissions & roles spread all over ?  
> The latter. Users are users so why complicate it with extra tables  
> and models, along with duplicated code? Just add to the available  
> roles to provide the access you require.

Colin

---

<div class="post-metadata">

**Author:** ![brianp](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/94ad74/32.png) [@brianp](https://www.ruby-forum.com/u/brianp)\
**Post date:** [March 26, 2010, 5:08pm UTC](https://www.ruby-forum.com/t/admin-sections-roles/185796/3 "2010-03-26T17:08:55Z")

</div>

If you need some inspiration, you could take a look at the  
role\_requirement[http://github.com/timcharper/role\_requirement](http://github.com/timcharper/role_requirement)plugin.  
It works with restful-authentication â€“ I think it’s great.

/Lasse

2010/3/26 brianp [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)
