News for hackers. Stuff that matters.

A comment on Rails – The Missing Parts – Policies. Parent comment

Re:Rails – The Missing Parts – Policies by bwilliams on Thursday March 20, 2014 @04:43PM (#7438601)
My problem with CanCan is that when you begin to have more complicated access logic ability.rb becomes a giant mess.

It's already a file where you just throw in all of your authorization logic anyways so it always feels a bit unruly once you get beyond basics.

[ Parent | on HN ]
Re:Rails – The Missing Parts – Policies by Jeff_Dickey on Friday March 21, 2014 @10:21AM (#7442438)
I agree. The first app we wrote using CanCan, the `ability.rb` file (and the dozen files we factored out of that) grew to be... significant.

I love the idea of Pundit because it decouples all that as much as seems practical. I'm about to find out if theory informs practice or not...

[ Parent | on HN ]