# Authentication including Authorization (Roles/Rights/Permissions)

**URL:** <https://www.ruby-forum.com/t/authentication-including-authorization-roles-rights-permissions/149284>\
**Category:** Rails\
**Created:** [September 23, 2008, 9:41am UTC](https://www.ruby-forum.com/t/authentication-including-authorization-roles-rights-permissions/149284 "2008-09-23T09:41:51Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Adriano\_F](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/d6d6ee/32.png) [@Adriano\_F](https://www.ruby-forum.com/u/Adriano_F)\
**Post date:** [September 23, 2008, 9:41am UTC](https://www.ruby-forum.com/t/authentication-including-authorization-roles-rights-permissions/149284/1 "2008-09-23T09:41:51Z")

</div>

It’s been couple of days messing around with Internet looking for a good  
Authentication including Autorization system/plugin for Ruby On Rails.

I’ve found lots of sources related to that. However, most of them are  
old,  
not frequently updated, not even well documented.

Please, any suggestions/solution considering Rails 2.1?

Thanks in advance.

a2f

---

<div class="post-metadata">

**Author:** ![Adriano\_F](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/d6d6ee/32.png) [@Adriano\_F](https://www.ruby-forum.com/u/Adriano_F)\
**Post date:** [September 23, 2008, 5:28pm UTC](https://www.ruby-forum.com/t/authentication-including-authorization-roles-rights-permissions/149284/2 "2008-09-23T17:28:51Z")

</div>

I will list two for you, but I still recomend a search on Github:

- Lockdown - [http://github.com/stonean/lockdown/](http://github.com/stonean/lockdown/)

- Restful-Authorization -  
[http://github.com/jbarket/restful-authorization/](http://github.com/jbarket/restful-authorization/)

---

<div class="post-metadata">

**Author:** ![Adriano\_F](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/d6d6ee/32.png) [@Adriano\_F](https://www.ruby-forum.com/u/Adriano_F)\
**Post date:** [September 23, 2008, 6:55pm UTC](https://www.ruby-forum.com/t/authentication-including-authorization-roles-rights-permissions/149284/3 "2008-09-23T18:55:46Z")

</div>

On Sep 23, 5:43 am, “Adriano F.” [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> It’s been couple of days messing around with Internet looking for a good  
> Authentication including Autorization system/plugin for Ruby On Rails.
> 
> I’ve found lots of sources related to that. However, most of them are old,  
> not frequently updated, not even well documented.
> 
> Please, any suggestions/solution considering Rails 2.1?
> 
> Thanks in advance.

I personally prefer this:

> **[GitHub - DocSavage/rails-authorization-plugin: This plugin provides a flexible...](https://github.com/DocSavage/rails-authorization-plugin/tree/master)**
>
> master

---

<div class="post-metadata">

**Author:** ![Adriano\_F](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/d6d6ee/32.png) [@Adriano\_F](https://www.ruby-forum.com/u/Adriano_F)\
**Post date:** [November 11, 2008, 5:37pm UTC](https://www.ruby-forum.com/t/authentication-including-authorization-roles-rights-permissions/149284/4 "2008-11-11T17:37:27Z")

</div>

Adriano F. wrote:

> It’s been couple of days messing around with Internet looking for a good  
> Authentication including Autorization system/plugin for Ruby On Rails.
> 
> I’ve found lots of sources related to that. However, most of them are  
> old,  
> not frequently updated, not even well documented.
> 
> Please, any suggestions/solution considering Rails 2.1?
> 
> Thanks in advance.
> 
> a2f

I’ve been using Authlogic, and love it. It’s fairly new, so doesn’t have  
the recognition or contributions that restful-authentication does.  
However, I find that Authlogic’s design philosophies are more in tune  
with me than, say, restful-authentication’s.  
-Nick

---

<div class="post-metadata">

**Author:** ![Adriano\_F](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/d6d6ee/32.png) [@Adriano\_F](https://www.ruby-forum.com/u/Adriano_F)\
**Post date:** [November 11, 2008, 6:45pm UTC](https://www.ruby-forum.com/t/authentication-including-authorization-roles-rights-permissions/149284/5 "2008-11-11T18:45:22Z")

</div>

[http://wiki.rubyonrails.com/rails/pages/Authentication](http://wiki.rubyonrails.com/rails/pages/Authentication)

I normally use a bit on the user, to use a more rolebased approach.  
bool (admin)  
So in your controller you can just use user.admin? to verify if they  
are allowed access to the function.

regards  
svend

---

<div class="post-metadata">

**Author:** ![Adriano\_F](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/d6d6ee/32.png) [@Adriano\_F](https://www.ruby-forum.com/u/Adriano_F)\
**Post date:** [November 11, 2008, 6:34pm UTC](https://www.ruby-forum.com/t/authentication-including-authorization-roles-rights-permissions/149284/6 "2008-11-11T18:34:13Z")

</div>

Nick

I have been reading through the Authlogic docs and it seems nice and  
sleek. I think I will test it on my app. Thanks,

Elías

On Nov 11, 11:37 am, Nick H. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)