Use pundit for authorization

rubyforgood / playtime

Supporting children and families experiencing homelessness in Washington, DC. Live app - https://wishlist.playtimeproject.org Organization Website:

http://www.playtimeproject.org/

MIT License

89 stars 50 forks source link

Use pundit for authorization #70

Closed leesharma closed 7 years ago

leesharma commented 7 years ago

Managing and testing our authorization logic is getting complicated, and it'll get more complicated as users are allowed to view their user pages, etc. Pundit makes that simpler by extracting authorization into policy objects. I think this change makes sense, but we should discuss whether this is the route we want to take.

Do you all think it's worth adding a dependency to separate out auth logic?

leesharma commented 7 years ago

This PR isn't ready–I need to incorporate the changes from the last PR.

micahbales commented 7 years ago

Looks good. Great idea to use Pundit to simplify our authorizations.