I’ve been working on an authorization framework called Action Policy for almost a year.
It was born as a result of struggling with other popular solutions like Pundit and CanCanCan. None of those two satisfied all of my needs: I wanted my authorization framework to be flexible and extensible, testable, and performant.
In this talk, I explain the reasons why I decided to build yet another authorization framework and take a deep look at Action Policy implementation.
