search

Safecast / safecastapi

The app that powers api.safecast.org
44 stars 25 forks source link

Clean up authorization logic #257

Open matschaffer opened 8 years ago

matschaffer commented 8 years ago

Currently we have authorization for various actions (edit, reject, etc) peppered all over the place.

Might be good to pull in something like one of these to make the views cleaner and avoid odd permission bugs:

eitoball commented 8 years ago

[FYI] Seems that cancan gem was tried in past (https://github.com/Safecast/safecastapi/blob/master/Gemfile#L7-L7 https://github.com/Safecast/safecastapi/blob/master/app/models/ability.rb)

cancan gem is used in some place like admin interface.