Access denied: the missing guide to authorization in Rails

Ruby on Rails brings us a lot of useful tools out-of-the-box, but there are missing parts too. For example, for such an essential task as authorization, we are on our own. Even if we choose a trending OSS solution, we still have to care about the way to keep our code maintainable, efficient, and, of course, bug-less.

Working on Rails projects, I’ve noticed some common patterns in designing access systems, as well as useful code techniques I’d like to share with you in this talk.