How do you manage Access Control?

rubyonrails-talk
1

I'm working on a rather large app, where we have more than 7 user roles, each of which will have permission to access different parts of the application.

Now the User/Admin system is falling short so I need to redefine the access control system.

I am thinking of coding something like cakephp uses, with aro's and aco's but is rather unmantainable to have a table with every single possible route and grant access to roles.

what is the best way to manage access control? how do you do it?

Thank you.

2

I'm working on a rather large app, where we have more than 7 user roles, each of which will have permission to access different parts of the application.

Now the User/Admin system is falling short so I need to redefine the access control system.

I am thinking of coding something like cakephp uses, with aro's and aco's but is rather unmantainable to have a table with every single possible route and grant access to roles.

what is the best way to manage access control? how do you do it?

I don't, but you could try one of these:

http://agilewebdevelopment.com/plugins/search?search=acl

3

Check out restful authentication plugin, and the role authentication plugin that works as an addition

4

I am actually using the restful_acl, and restul_authentication plugins, but they are really falling short

5

max wrote:

I am actually using the restful_acl, and restul_authentication plugins, but they are really falling short

Check out this tutorial on restful_authentication, maybe it could give you some ideas on access control.

http://railsforum.com/viewtopic.php?id=14216

mike

6

tried this one? http://agilewebdevelopment.com/plugins/show/807

7

May I ask how? Can I help?