ryanb/cancanArchived

Features

• Access Control and Authorization - Implements a comprehensive system for enforcing user permissions and access control within Ruby on Rails applications.
• Authorization Libraries - Defines and enforces user permissions for database resources within a Ruby on Rails application.
• Authorized Record Filtering - Modifies database queries to return only the subset of records a user is permitted to see.
• Access Control Centralization - Manages user roles and permissions in one location to decouple security logic from application controllers.
• Centralized Permission Management - Provides a centralized location to define all user permissions, decoupling authorization logic from controllers and models.
• User Capability Verifications - Verifies if a user possesses the required permissions to perform specific actions on resource instances or classes.
• Declarative Access Control Layers - Provides a framework for specifying resource permissions using declarative hash conditions and scopes.
• Controller Action Integration - Wraps controller actions to automate resource loading and permission verification before executing business logic.
• Custom Access Rules - Implements a system of custom allow and deny rules to determine if users can perform specific actions.
• Accessible Resource Filtering - Verifies if users can perform specific actions on objects and handles unauthorized requests.
• Attribute-Based Database Filtering - Filters accessible records using database column conditions and nested association hashes.
• Role-Based Access Control - Implements complex access hierarchies and conditional rules to control what different user types can do.
• Declarative Permission Rules - Allows defining which users can perform actions on resources using conditions, scopes, and ability sets.
• Record-Level Filtering - Retrieves only specific data records a user is permitted to see based on defined access rules.
• Ruby on Rails Integrations - Provides a specialized library for defining user permissions and enforcing access control within Ruby on Rails.
• Rule Precedence Logic - Combines allow and deny rules for the same resource to create complex access hierarchies through definition order.
• Resource-Level Access Controls - Fetches a specific resource from the database and verifies the user's permission to access that instance.
• Hash-Based Permission Mapping - Translates Ruby hashes into database queries to filter records based on user attributes or resource properties.
• Authorization Exception Rescue - Catches authorization failures globally to trigger custom redirects or display forbidden access messages.
• Custom Authorization Logic - Determines whether an authorization check is required based on custom logic or specific controller states.
• Database Query Permissions - Filters database records based on defined user abilities to retrieve only authorized data.
• Controller Action Authorization - Automatically loads model instances and verifies access permissions for all actions within a controller.
• Authorization Check Enforcement - Provides a mechanism to raise exceptions if a controller action completes without performing an authorization check.
• Mandatory Authorization Checks - Requires every controller action to perform an authorization check and raises an error if any action is skipped.
• Unauthorized Access Exceptions - Triggers specific error classes when permissions are missing to allow global handling of unauthorized requests.

Star history