# Authentication and Authorization

**URL:** <https://www.ruby-forum.com/t/authentication-and-authorization/187229>\
**Category:** Rails\
**Created:** [April 20, 2010, 9:14am UTC](https://www.ruby-forum.com/t/authentication-and-authorization/187229 "2010-04-20T09:14:08Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![marcelopanivino](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/e274bd/32.png) [@marcelopanivino](https://www.ruby-forum.com/u/marcelopanivino)\
**Post date:** [April 20, 2010, 9:14am UTC](https://www.ruby-forum.com/t/authentication-and-authorization/187229/1 "2010-04-20T09:14:08Z")

</div>

Hi there,

I have been looking for a plugin to authenticate and authorize users  
in a ruby on rails application.

I found some options like:

Restful authentication, Authologic, Clearence and Devise.

I would like to know your opinions about these plugins, so I can  
choose one to use in the app.

Thanks in advance,

Marcelo P  
Brasil

---

<div class="post-metadata">

**Author:** ![marcelopanivino](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/e274bd/32.png) [@marcelopanivino](https://www.ruby-forum.com/u/marcelopanivino)\
**Post date:** [April 20, 2010, 12:52pm UTC](https://www.ruby-forum.com/t/authentication-and-authorization/187229/2 "2010-04-20T12:52:28Z")

</div>

You can use Devise for authentication and for Authorization you can go  
with cancan…

If you already know how to install configure and work with these  
plugins then OK otherwise there are railscasts to start with …

I hope this helps…

- Ramu.

---

<div class="post-metadata">

**Author:** ![marcelopanivino](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/e274bd/32.png) [@marcelopanivino](https://www.ruby-forum.com/u/marcelopanivino)\
**Post date:** [April 20, 2010, 2:23pm UTC](https://www.ruby-forum.com/t/authentication-and-authorization/187229/3 "2010-04-20T14:23:12Z")

</div>

On Mon, Apr 19, 2010 at 8:23 PM, Marcelo P. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
wrote:

> choose one to use in the app.

I would go with Authlogic for authentication. If your authorization  
requirements will be simple, cancan it’s just fine, if you plan  
growing up in matter of roles and stuff, I would recommend Declarative  
Authorization.

Hope it helps.

–  
Leonardo M…  
There’s no place like ~