# Access denied: the missing guide to authorization in Rails

- URL: https://evilmartians.com/events/access-denied-the-missing-guide-to-authorization-in-rails
- Date: 2018-04-17T00:00:00.000Z
- Conference: RailsConf
- City: Pittsburgh, Pennsylvania, United States
- Speakers: Vladimir Dementyev
- Event website: https://railsconf.org/
- Video: https://www.youtube.com/watch?v=NVwx0DARDis
- Slides: https://speakerdeck.com/player/8ca822561fb1492ebc7e828e585337bd

---

This talk discusses common patterns in designing access systems and demonstrates useful code techniques.

Ruby on Rails brings us a lot of useful tools out-of-the-box, but there are missing parts too. For example, for such an essential task as authorization, we are on our own. Even if we choose a trending OSS solution, we still have to care about the way to keep our code maintainable, efficient, and, of course, bug-less.

Working on Rails projects, I’ve noticed some common patterns in designing access systems, as well as useful code techniques I’d like to share with you in this talk.