Skip to content
Very simple authorization solution
Ruby
Find file
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Failed to load latest commit information.
lib
test
.gitignore
Gemfile
README.rdoc
Rakefile
active_control.gemspec

README.rdoc

ActiveControl

ActiveControl is a very simple authorization solution with no dependencies. Each rule is stored in the class that grant permission. Other object can then check if they have access to a specific action via the can? method (or via cannot?).

Install

gem install active_control

Usage

The first thing to do is to include ActiveControl::Ability in the object which needs to check if it can perform an action on another object.

class User
  include ActiveControl::Ability
end

At the other end include ActiveControl::Authorization in the object that will give its “blessing” or not based on some internal rules defined by you. Rules are just normal methods you have to defined at the instance-level with a specific name. E.g. if an instance of the User:Class wants to update another object you have to define authorize_user_to_update? and make it returns a boolean.

class Page
  include ActiveControl::Authorization

  ...

  def authorize_user_to_update?(user)
    user.id == self.user_id
  end
end

Then you can do something like this

if @user.can? :update, @page
  @page.update_attributes(params[:page])
else
  ...
end

And that's it. Simple uh!

Something went wrong with that request. Please try again.