ACLs in REST APIs
summary
A Ruby gem that claims to manage ACLs in REST APIs by moving authorization out of controllers and enforcing rules at the resource-level enforcement, using a declarative ACL with standard data structures. Supports role-based privileges with inheritance, works in MVC controllers or any Ruby app, and adds custom assertions via lambdas. Installation is gem install simple_acl, include the module, add filters and rescue authorization exceptions; testing and readability are emphasized.
AI-written summary · about
chapters (5)
related talks
41mAccess Denied: the missing guide to authorization in Rails
39mAttribute Based Access Control Framework for IoT
09mFlexible Authorization:Storing and Managing Rules in DB
36mIn Relentless Pursuit of REST
12mRBAC Project
20mBuilding Scalable Access Control Frameworks in React
26mAuthorization in a Service-Oriented Environment
25mModernizing Authorization: From Basic Roles to Decoupled ABAC