Authorization

[martio]

trafficstars

How to use Pundit and Rolify?

[spohlenz]

User authorization support via Pundit is fairly high on the list of priorities for https://github.com/TrestleAdmin/trestle-auth. However it isn't currently supported yet.

[FreeApophis]

Any easy way to fake it?

[svoboda-jan]

You could try the following:

controller do
  include Pundit

  def update
    authorize instance
    super
  end
end

The exemple assumes that you have the correct policy object (app/policies).

[svoboda-jan]

@spohlenz Also authorization is NOT authentication, I would recommed against mixing pundit specific things into trestle-auth. There shoud be for e.g. trestle-auth, trestle-devise and trestle-pundit.

Releveant and recommended reading: https://stackoverflow.com/questions/6556522/authentication-versus-authorization?answertab=active#tab-top