Authorization with Pundit

Authorization means controlling what users are allowed to do what actions, and it's an important part of many Rails applications. In the past the CanCan gem was commonly used for this. We'll explore Pundit, a new-ish gem that takes a different approach.

This class will build on a previous lesson where we set up the Devise gem to handle authentication. We'll extend that work and combine Devise's authentication abilities with Pundit's authorization.

Students should have a Ruby on Rails development environment installed and ready to go (here is a guide), and be familiar with the concepts of user authentication and authorization. To get the most out of this class you should be familiar with Ruby on Rails, MVC application architecture, and the Devise, Pundit, and CanCan gems.

If there is interest I'll broadcast a google hangout, check out the whiteboard at class time for a link.