Guest users (no current_user)

[oliverbarnes]

What's the recommended way to scope collections on a controller when a user isn't logged in, and a current_user isn't available?

As in a public listing available to non-registered users, and a private one for logged-in ones.

[tbuehlmann]

Well, current_user could return nil then, which you could check in the actual Policy. Depending on the outcome of this you act.

[oliverbarnes]

I see, policy_scope() won't barf by not having current_user set then... should have checked for that :) thanks

[dmitrypol]

What about doing this in application_controller?

include Pundit
def pundit_user
  current_user ||= User.new # guest user
end