Skip to content


Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP

Ensure Authorization

ryanb edited this page · 8 revisions

As of 1.4, if you want to be certain authorization is not forgotten in some controller action, add check_authorization to your ApplicationController.

class ApplicationController < ActionController::Base

This will add an after_filter to ensure authorization takes place in every inherited controller action. If not it will raise an exception. You can skip this check by adding skip_authorization to that controller. Both of these methods take the same arguments as before_filter so you can exclude certain actions with :only and :except.

Something went wrong with that request. Please try again.