# User Authorization/Role Frameworks

**URL:** <https://www.ruby-forum.com/t/user-authorization-role-frameworks/128725>\
**Category:** Rails\
**Created:** [February 11, 2008, 2:15am UTC](https://www.ruby-forum.com/t/user-authorization-role-frameworks/128725 "2008-02-11T02:15:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![pkoebbe](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/ec9cab/32.png) [@pkoebbe](https://www.ruby-forum.com/u/pkoebbe)\
**Post date:** [February 11, 2008, 2:15am UTC](https://www.ruby-forum.com/t/user-authorization-role-frameworks/128725/1 "2008-02-11T02:15:38Z")

</div>

I’ve been asked the following question and I don’t know the answer as  
I have not used any of the authentication plugins yet. So far, I’ve  
just rolled my own.

I know of acts\_as\_authenticated and restful\_authentication. Will  
these handle roles? Are there others?

Thanks,  
Phillip

Begin forwarded message:

---

<div class="post-metadata">

**Author:** ![pkoebbe](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/ec9cab/32.png) [@pkoebbe](https://www.ruby-forum.com/u/pkoebbe)\
**Post date:** [February 11, 2008, 5:02am UTC](https://www.ruby-forum.com/t/user-authorization-role-frameworks/128725/2 "2008-02-11T05:02:27Z")

</div>

Hey Phillip,

I’m kind of looking for a similar situation. Right now we’re using  
Restful\_Authentication. For what it is worth, we’re going to go with  
the simple\_access\_control plugin ([http://mabs29.googlecode.com/svn/](http://mabs29.googlecode.com/svn/)  
trunk/plugins/simple\_access\_control/README) to implement roles. It’s  
supposed to integrate with Restful\_Auth nicely and takes the best  
points of other ACL plugin’s.

Otherwise, Restful\_Authentication/AAA are both fairly easy to extend  
if you want to create your own custom ACL solution.