Re: Q&A about REST, namespaced controllers, authentication a

S. Potter
Tue, 20 Mar 2007 21:48:19 -0000

Diego,

I am not an expert on these matters, but this is what I can offer you if
you are still interested in:

== Authentication:
restful_authentication provides a RESTful approach to authentication
alone utilizing HTTP Basic Authentication for some of the functionality.
If you want to do RBAC (Role-Based Authorization) you can check out the
following two plugins that sit on top of acts_as_authenticated (and
should also work with restful_authentication):
 * Authorization: http://www.writertopia.com/developers/authorization
 * ACL System:
http://opensvn.csie.org/ezra/rails/plugins/dev/acl_system2
 * Create your own authorization system (my manager didn''t like the
above two for our use cases, so we rolled our own).

I am no authority on the matter of how RESTful these authorization
plugins are as I haven''t used them before.  So that is something you
will need to determine for yourself.

I am currently working on a site that has the following "types" of
users: internal (e.g. customer service rep), developer (partner
developers), customer (paying customers).  I have personally created
three different web applications and hosting them on different
domains/subdomains.  This allows the internal web app to only be served
to local IP addresses (in Apache/LigHTTPd) configuration very easily.
The common code (like models, controllers, views, etc.) I created a
plugin for and installed the plugin in each web application (I use
Engines 1.2 to help with this sharing even in Rails 1.2.x too).

These are just my thoughts.  I''m interested in other people''s
thoughts
and experiences.

Thanks,
SP

--
Posted via http://www.ruby-forum.com/.