Pundit - Ruby on Rails Police Department

The presentation is a quick guide to Pundit - Ruby on Rails solution for building a simple, robust and scaleable authorization system for your web application. It covers both the idea behind the gem and an easy way how to use it in your project.

Author: Piotr Kochowicz, web developer at Binar::Apps (http://binarapps.com)

Transcript

1. PUNDIT Ruby on Rails Police Department Piotr Kochowicz Binar::Apps
2. AGENDA Motivation Gem overview Use cases
3. MOTIVATION Peer discussion Project experience Curiosity
4. PUNDIT history created by ELABS alternative for CanCan based on objectify
5. PUNDIT simple object oriented flexible isolated
6. APPLICATION POLICY Base class for policies Defines default policy behaviour
7. POLICY Defined for an object Accesses a user and an object Contains Scope class and authorization methods inherits from ApplicationPolicy
8. APPLICATION CONTROLLER Ensures policies are used Handles authorization exception Additional exception info exception.policy exception.query exception.record
9. CONTROLLER Uses policy for scoping Authorizes object
10. RSPEC
11. RSPEC simple http://thunderboltlabs.com/blog/2013/03/27/testing-pundit-policies-with-rspec/
12. OTHER FEATURES Using policy in a view Strong parameters Custom user Custom policy class
13. OTHER FEATURES Policy without object Alias method
14. DISCUSSION Best use cases Where it creates overhead?
15. Thank you Reference: https://github.com/elabs/pundit http://www.elabs.se/blog/52-simple-authorization-in-ruby-on-rails-apps http://thunderboltlabs.com/blog/2013/03/27/testing-pundit-policies-with-rspec/ http://www.sitepoint.com/straightforward-rails-authorization-with-pundit/ https://github.com/FetLife/objectify http://www.slideshare.net/BruceWhite3/pundit-37048056 by Bruce White http://slides.com/maciekbrodecki/prezpundit#/ by Maciej Brodecki