ruby on rails - Best ability based authorization -


i have rails 3 app, use cancan authorization, looking suits needs better. authorizations not role based, more situational.

the application managing daily dinner clubs @ college/dorm, people takes turn making dinner rest. chef have therefore more permissions dinner club responsible (like changing menu), , participant have more permissions (like adding guests) 1 not participating in single dinner club.

what need therefore authorization system depends on relationship between user , dinner club or kitchen (a kitchen have many dinner clubs), not users role.

if helps, current cancan abilities here (as see pretty complex)

# in ability.rb  def initialize(user)   # edit (like changing time or menu) dinner club   can :edit, dinnerclub |dinner_club|     dinner_club.is_chef?(user) &&     !dinner_club.canceled?   end    # open or close dinner club   can [:open, :close], dinnerclub |dinner_club|     !dinner_club.passed? &&     dinner_club.is_chef?(user)   end    # cancel or resume dinner club   can [:cancel, :resume], dinnerclub |dinner_club|     !dinner_club.passed? &&     dinner_club.is_chef?(user)   end    # register or unregister @ specific dinner club   can [:register, :unregister], dinnerclub |dinner_club|     dinner_club.open? &&     (dinner_club.kitchen_id == user.kitchen_id || dinner_club.kitchen.open_registrations?) &&     !dinner_club.is_chef?(user)   end    # add guests dinner club   can [:add_guests], dinnerclub |dinner_club|     dinner_club.open? &&     (dinner_club.kitchen_id == user.kitchen_id || dinner_club.kitchen.open_registrations?) &&     dinner_club.registered?(user)   end    # take dinner club use if dinner club canceled   can [:take], dinnerclub |dinner_club|     dinner_club.canceled? &&     (dinner_club.kitchen_id == user.kitchen_id || dinner_club.kitchen.open_registrations?) &&     !dinner_club.passed? &&     !dinner_club.is_chef?(user)   end    # create new dinner club   can [:create], dinnerclub |dinner_club|     (dinner_club.kitchen_id == user.kitchen_id || dinner_club.kitchen.open_registrations?)   end    # comment on existing dinner clubs   can [:comment], dinnerclub |dinner_club|     dinner_club.registered?(user)   end    # can see dinner clubs kitchen   can :read, kitchen |kitchen|     (kitchen.id == user.kitchen_id || kitchen.open_registrations?)   end    # can manage kitchen, changing name , configuration options   can :manage, kitchen, admin_id: user.id end

you can rewrite of these blocks in cancan make them lot less complex.

can :edit, dinnerclub, cancelled: false, chef_id: user.id  # open or close dinner club can [:open, :close], dinnerclub, passed: false, chef_id: user.id  # take dinner club use if dinner club canceled can [:take], dinnerclub, cancelled: true, kitchen_id: user.kitched_id, passed: false   can [:take], dinnerclub, cancelled: true, kitchen: { open_registrations: true }, passed: false cannnot [:take], dinnerclub, chef_id: user.id

this assuming cancelled? , passed? methods derived boolean attributes on dinnerclub model , is_chef? method checks chef_id. illustrates idea.

cancan used define abilities based on resources, go that.


Comments

Post a Comment

Popular posts from this blog

jquery - How can I dynamically add a browser tab? -

since using iframes house external pages are, accounts "not preferred method" , disallowed sites (flickr, one), want dynamically generate browser tabs. e.g., when user submits form, want dynamically generate tab on browser in response submitted. e.g., might want add new tab url like: http://www.bigsurgarrapata.com/contact how in jquery? you want form target attribute action attribute. http://www.w3schools.com/tags/att_form_target.asp browsers have ultimate control on result of target attribute open new tab value of _blank. <form action="contact_submit.php" target="_blank" method="post">
Read more

keyboard - C++ GetAsyncKeyState alternative -

i using windows.h library's getasynckeystate function define key pushed on keyboard . here program returns int value of pushed key example. #include <iostream> #include <windows.h> using namespace std; int main (){ char i; for(i=8;i<190;i++){ if(getasynckeystate(i)== -32767){ cout<<int (i)<<endl; } } return 0; } but trying make opengl simple game , function appeared slow . there function not need cycle 180 times , if statement . thanks you're trying make opengl game, you're going use glfw. if that's case can away using glfwgetkey() such: if (glfwgetkey(glfw_key_up) == glfw_press) {...} if (glfwgetkey(glfw_key_down) == glfw_press) {...} that method nicely explained in tutorial 6 opengl-tutorial.org . should start first tutorial of beginners tutorials , later intermediate tutorials . if you're going make win32 window can listen wm_keydown or wm_keyup messages , virtua...
Read more

android - java.net.UnknownHostException(Unable to resolve host “URL”: No address associated with hostname) -

i developing app testing asp.net webservice in android.for simple webservice adding 2 numbers used.where numbers passed parameters.the result in dialogue.the webserver works in local. when application runs following result exception.i provided internet permission in manifest. java.net.unknownhostexception(unable resolve host “ http://url.com/ ”: no address associated hostname) my code given below main activity public static string rslt=""; /** called when activity first created. */ @override public void oncreate(bundle savedinstancestate) { super.oncreate(savedinstancestate); setcontentview(r.layout.activity_main); button b1=(button)findviewbyid(r.id.button1); final alertdialog ad=new alertdialog.builder(this).create(); b1.setonclicklistener(new onclicklistener() { @override public void onclick(view arg0) { // todo auto-generated method stub try { ...
Read more