# User Authentication and permissions **URL:** \ **Category:** Ruby\ **Created:** [July 26, 2007, 10:45pm UTC](https://www.ruby-forum.com/t/user-authentication-and-permissions/110505 "2007-07-26T22:45:31Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Jacko](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/4af34b/32.png) [@Jacko](https://www.ruby-forum.com/u/Jacko)\ **Post date:** [July 26, 2007, 10:45pm UTC](https://www.ruby-forum.com/t/user-authentication-and-permissions/110505/1 "2007-07-26T22:45:31Z")
This may be a bit too open ended but what is the best way to add user authentication and security services to a ruby on rails app. Is there a standard API or Framework to achieve this? ---
**Author:** ![Jacko](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/4af34b/32.png) [@Jacko](https://www.ruby-forum.com/u/Jacko)\ **Post date:** [July 27, 2007, 2:18am UTC](https://www.ruby-forum.com/t/user-authentication-and-permissions/110505/2 "2007-07-27T02:18:51Z")
On 7/26/07, Jacko [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote: > This may be a bit too open ended but what is the best way to add user > authentication and security services to a ruby on rails app. Is there > a standard API or Framework to achieve this? [http://groups.google.com/group/rubyonrails-talk](http://groups.google.com/group/rubyonrails-talk) [http://www.google.com/search?&q=rails+authentication](http://www.google.com/search?&q=rails+authentication) ---
**Author:** ![Jacko](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/4af34b/32.png) [@Jacko](https://www.ruby-forum.com/u/Jacko)\ **Post date:** [July 29, 2007, 6:29am UTC](https://www.ruby-forum.com/t/user-authentication-and-permissions/110505/3 "2007-07-29T06:29:41Z")
On Jul 26, 2007, at 3:44 PM, Jacko wrote: > This may be a bit too open ended but what is the best way to add user > authentication and security services to a ruby on rails app. Is there > a standard API or Framework to achieve this? There are a few ways, one is well covered in the AWDWR book. The other is similar but cleaner for you. A plugin called: acts\_as\_authenticated Essentially things are separated into different controllers. Controllers that require authentication or login of some kind are not accessible without that. That means the URL/URI’s generated by their methods/actions cannot be accessed without authentication. Everything in the controllers that don’t require authentication are accessible. (basically, though this is all a very simplified description, but Rails does make it all pretty easy) But check out the Ruby T. list at Google groups. That’s the best place to ask Rails-specific questions. This list may get you some answers, as Rails does use Ruby and libraries written in Ruby. Depends on the topic ---
**Author:** ![Jacko](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/4af34b/32.png) [@Jacko](https://www.ruby-forum.com/u/Jacko)\ **Post date:** [July 29, 2007, 5:29pm UTC](https://www.ruby-forum.com/t/user-authentication-and-permissions/110505/4 "2007-07-29T17:29:39Z")
On 7/29/07, John J. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote: > But check out the Ruby T. list at Google groups. > That’s the best place to ask Rails-specific questions. > This list may get you some answers, as Rails does use Ruby and > libraries written in Ruby. Depends on the topic That is the mailing list you are responding to right now. If you’re on comp.lang.ruby or ruby-forum, the majority of your traffic is coming from RubyTalk, FWIW. And please _don’t_ ask Rails questions here, send them along to the Ruby on Rails list. The folks here have made it clear that we’d prefer to see the traffic go to where its most likely to get the right answers. ---
**Author:** ![Jacko](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/4af34b/32.png) [@Jacko](https://www.ruby-forum.com/u/Jacko)\ **Post date:** [July 30, 2007, 5:52am UTC](https://www.ruby-forum.com/t/user-authentication-and-permissions/110505/5 "2007-07-30T05:52:15Z")
On Jul 29, 2007, at 10:28 AM, Gregory B. wrote: > And please _don’t_ ask Rails questions here, send them along to the > Ruby on Rails list. The folks here have made it clear that we’d prefer > to see the traffic go to where its most likely to get the right > answers. Oops, that was an early morning coffee moment, I meant Rails Talk at Google groups!