# Authentication and authorization

**URL:** <https://www.ruby-forum.com/t/authentication-and-authorization/88494>\
**Category:** Rails\
**Created:** [March 12, 2007, 2:30am UTC](https://www.ruby-forum.com/t/authentication-and-authorization/88494 "2007-03-12T02:30:23Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jima](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/47e85d/32.png) [@jima](https://www.ruby-forum.com/u/jima)\
**Post date:** [March 12, 2007, 2:30am UTC](https://www.ruby-forum.com/t/authentication-and-authorization/88494/1 "2007-03-12T02:30:23Z")

</div>

What are folks doing for their authorization control in their RoR  
applications.

I am currently looking at the following resources

[http://www.billkatz.com/authorization](http://www.billkatz.com/authorization) (authorization plugin)  
[http://perens.com/FreeSoftware/ModelSecurity/Tutorial.html](http://perens.com/FreeSoftware/ModelSecurity/Tutorial.html) (model  
security)

I imagine that most people are using acts\_as\_authenticated and the  
authorization plugin to implement the authentication/authorization.

Any feedback would be appreciates?

cheers