devise_restful_auth

First, I’m sorry to have the wheel reinvented one more time.

This gem should help developers who need fine grained control over authorization.

Authorization is meant to be bound to a subject, usually the current_user, an object (which should be inferred from the controller) and a controller/action couple.

Authorization info is stored in the Permission model. There is support for both role based and subject based authorization.

More info, a basic guide and something else should come soon.

Needed Migrations

create_table "permissions", :force => true do |t|
  t.string    "controller"
  t.string    "action"
  t.timestamp "created_at"
  t.timestamp "updated_at"
end

create_table "subject_permissions", :force => true do |t|
  t.integer   "subject_id"
  t.string    "subject_type"
  t.integer   "item_id"
  t.string    "item_type"
  t.integer   "permission_id"
  t.timestamp "created_at"
  t.timestamp "updated_at"
end

You should provide yourself the models for the above migrations w/ routes. A scaffold is a good way at the present time.

Contributing to devise_restful_auth

Copyright © 2010 saten. See LICENSE.txt for further details.