search for: updateable_by_boss_of_my_author

...only allow a subset of those people to update or destroy the same objects. GateKeeper makes this absurdly easy to setup and maintain by allowing you to simply make declarations right in your model like... createable_by_my_author crudable_by_admin readable_by_premium_member :if => :published? updateable_by_boss_of_my_author :unless => lambda {|article| article.draft_number < 3 } readable_as_my_parent If a user on your site tries to perform an action on an instance of any ActiveRecord model, and permission to perform that action hasn''t been explicitly granted to that user via a declaration like the...