Database based privileges

[tvdeyen]

Hi,

sorry for posting this first into your blog. I did not know about you
google group at this point. Again, my apologies for that.

I installed the plugin and it is working like charm. I love the
approach to keep this outside the controllers and models in a central
rubylike DSL.

For our project it would be nice to have a user administrable role and
permission system. So, are there are any plans to move the
authorization rules into the database? I'll try a little bit inside
our application, maybe I can provide a patch. But it would be very
helpful if someone with more programming experience then me would help
with this. I believe this would give this great plugin a additional
push to be maybe the next aaa, or willpaginate :)

[Steffen Bartsch]

Am Donnerstag, 29. Oktober 2009 schrieb tvdeyen:
> For our project it would be nice to have a user administrable role and
> permission system. So, are there are any plans to move the
> authorization rules into the database? I'll try a little bit inside
> our application, maybe I can provide a patch. But it would be very
> helpful if someone with more programming experience then me would help
> with this. I believe this would give this great plugin a additional
> push to be maybe the next aaa, or willpaginate :)

Actually, database-backed role definitions have been requested a few times
already. In my experience, the DSL form of defining roles is sufficient for
many projects. I would be glad, though, to add the database backend as a
second option and would accept patches.

One of the interesting parts of implementing the database backend is to
provide a usable administration, in particular concerning the definition of
complex rules.

This ticket might be a good starting point:
http://stffn.lighthouseapp.com/projects/20733/tickets/11-refactor-engine-and-
reader-to-simplify-adding-further-reader-backends

Steffen