RailsCasts Pro episodes are now free!

Learn more or hide this

Applied Filters: rspec xSecurity x
Authorization from Scratch Part 2
Episode #386 – Oct 11, 2012 – 97 comments

Authorization from Scratch Part 2

This finishes the series on building authorization from scratch by refactoring the permission logic into a DSL, restricting authorization with attributes, and combining with strong_parameters to protect params. (20 minutes)
Authorization from Scratch Part 1
Episode #385 – Oct 07, 2012 – 82 comments

Authorization from Scratch Part 1

Authorization can be difficult to implement and test because it often involves complex logic that exists throughout the entire app. Here I demonstrate how to test and implement authorization from scratch. (15 minutes)