What are some good role authorization solutions us

Question

I am looking for a good role based authorization solution to use alongside Authlogic. Anyone have any good suggestions? Please list some pros and cons from your experience if possible please.

Answer 1

At RailsConf, I saw a lightning talk on Lockdown and was very impressed. Anyone with a modest amount of db and rails experience can roll their own ACL system, but Lockdown looks nice because it tries to keep the permission stuff out of the way.

http://lockdown.rubyforge.org/

I had used role_requirement previously but I didn't dig it.

Answer 2

I have recently have been using a gem called easy_roles. Super light weight and super easy to use. It's also flexible enough for you to implement your own controller security etc etc.

http://github.com/platform45/easy_roles

Answer 3

Check out http://blog.platform45.com/2009/10/05/howto-basic-roles-for-users for basic role requirement, works with restful_authentication and authlogic..

It's really simple, fast and lightweight.

Answer 4

Acl9 works great with AuthLogic:

http://github.com/be9/acl9/tree/master