Displaying 20 results from an estimated 700 matches similar to: "Fine grained access control"
2006 May 17
1
Experiences with ModelSecurity
Hiall,
I would be very interested in your opinions on the ModelSecurity
plugin by Bruce Perens.
http://perens.com/FreeSoftware/ModelSecurity/Tutorial.html
Some time ago, I read on a few pages that it is the way to go, on this
list however, I didn''t read much about it. Apart from it''s security
level,
quoted from comments in source code:
# FIX: At the moment we only support
2006 Jan 23
5
can''t install model_security_generator
I''m trying to install Bruce Perens'' ModelSecurity gem, but it keeps asking me if I want to
install rails too (I have already installed rails). It exits if I say no and crashes if I
say yes:
C:\>"c:\ruby\bin\ruby.exe" "c:\ruby\bin\gem" install model_security_generator
Attempting local installation of ''model_security_generator''
Local gem
2006 Jan 16
2
LoginEngine vs. LoginGenerator?
I just saw a mention here of LoginEngine, which I hadn''t heard of
before. Last week when I was digging for user-account sample code for
my web-app, I instead found the LoginGenerator and started using that:
http://wiki.rubyonrails.com/rails/pages/LoginGenerator
Is one of these preferred over the other? From skimming the API docs,
it does seem that LoginEngine has more features,
2006 Mar 02
3
Modifying "Find" to always add a condition?
I''d like to always add a condition to any version of "find" (e.g.
Thing.find(), Thing.find_by_name(), Thing.find_by_whatever) so that in
addition to whatever conditions are set, an additional condition is set
:conditions=>"user_id=#{current_user.id}"
I''d like to make sure that a user only sees/edits/creates entries in the
database that have the user_id
2006 Apr 22
2
restrict specific model columns per user
Does anyone know a way to restrict access to specific columns in the
model to specific users? My plan was to use the session hash to check
the permissions of the logged in user in an overridden method of the
same name as the model accessor I wanted to restrict, but the model
can''t acecss the session. Any other ideas?
--
Posted via http://www.ruby-forum.com/.
2006 Apr 28
4
Call for patterns...
Hi group,
I was wondering if anyone more experienced could help me to find a good
pattern for two things:
1. How to group controllers. Example:
We have an admin panel with:
user_managment_controller.rb
priv_managment_controller.rb
widget_controller.rb
User panel with:
mystuff_controller.rb
mytags_controller.rb
profile_controller.rb
And frontend with:
widget_controller.rb
etc...
How do I group
2006 Jan 12
9
Scaffold shows all attributes altough I use attr_accessible!
Hi all
I have a Model like this:
class Member < ActiveRecord::Base
attr_accessible :username, :email, :first_name, :last_name
end
I have created a scaffold using script/generate scaffold member members
Using the URL localhost:3000/members/edit/1 I can edit all attributes,
including created_at, lock_version etc.! But it should only show the
attributes I listed in attr_accessible!
What
2006 Apr 04
4
Membership Management System Plugin/Gem?
Hi, I''m looking to create an online internet community for managing
user profiles and other data. Thus, I would need that has the
following features:
o authentication
- protect individual member pages/directories
o session management
o retrieve and reset passwords
In short, I''m looking to create an online community. Thus, can
someone direct me to a plugin(s) for
2008 Sep 12
3
Help: A copy of ModelSecurity has been removed from the module tree but is still active!
Hi all, I''m posting this in the hope that someone who understands
rails dependencies can shed some light.
I''ve implemented a "ModelSecurity" module in the vein of Bruce Peren''s
old ModelSecurity plugin (http://rubyforge.org/projects/model-
security/).
My ModelSecurity module lives in $RAILS_ROOT/lib. It is automatically
included into ActiveRecord::Base by a
2006 Apr 14
2
Rails AWS authentication????
I want to setup an api for my web app, but i had a few question on the best
way to do this. I was hoping for some input from you experienced
individuals and rails rock stars.
1) Is there a way to implement a login in feature so that api methods cant
be called without proper authorization? This is so i can log activity and
use of the api from different people and so
-------------- next part
2006 Mar 04
0
ModelSecurity for Rails by Bruce Perens
Modelsecurity aims to provide access control within the data model so
that it becomes easy & efficient to specify read or write access to
individual fields.
It has one of those "why didn''t I think of that?" designs which make a
lot of sense.
Has anyone else tried using the latest release of ModelSecurity? What
has been your experience?
Home
2008 Jul 08
3
undefined method `name' ...........
Hi Community....
I''m new in this game, so this might be a easy question, but I have
done my google, without result, so I will try this....
I''m learning ROR, and I''m using Patrick Lens ''Ruby on Rails'' book.
(This is written for ror 1.x - and I''m using NetBeans 6.1 - ror 2.x -
this might be the problem...)
But...
I have made this
2006 Jan 25
9
AJAX Search w/database results
Hey,
I have a main page that lists a table of Devices, along with a Search
box. I''d like to have the Search field pull up any related Devices,
and then re-populate the table.
I can do this without AJAX, just calling my List action over again,
passing the params to search on, but with AJAX I get the error,
"Cannot convert nil to string" on this line:
@device_pages, @devices =
2006 Jun 18
5
User/Password Management: Mapping items to inidividual users
Is there a good plugin that does per page authentication management?
For example, I want to allow users to create pages and share them with
specific users, all users, or none at all on a per page basis.
Benjamin
--
Posted via http://www.ruby-forum.com/.
2006 Jan 12
3
url_for in tests
Hi there,
I''ve added an extra bunch of testing features for doing in-browser
testing with Selenium, and am having quite a time figuring out how to
use url_for with having a controller object present. I''ve tried using
ActionController::Base.url_for and
ActionView::Helpers::UrlHelper.url_for but haven''t been able to get
something that works.
What I want to be able
2006 Jan 11
2
Good OOP and JS books / tutorials? Looking to teach my team
Can anyone recommend good books, online tutorials, or any other learning
materials for Javascript - specifically Object Oriented Programming using
JS?
I want the rest of my dev team to be able to help me code in JS,
specifically using prototype and scriptaculous. I''ve been using JS for so
long, and I kinda "grew up" on OOP programming but my whole team is
Coldfusion
2005 Nov 18
3
[OT][Practices] The Case for RBAC/MAC
1: e-mail is a people skill, you affect people with it. The value
of your presentation rises or falls with your skill at presentation.
2: My embedded headless linux targets live in isolated
networks, even relative to other computer or
network equipment at the target site. At times, the nearest
land is 2 miles straight down (ocean floor).
3: These targets are also without
2009 Oct 19
9
Can (should) each :user have his own table?
I was reading this article a while back
http://www.sitepoint.com/blogs/2008/06/06/did-rails-sink-twitter/
and it got me thinking. If I wanted to set up my app so that each
user has his/her own table, how would I go about doing that?
"create_table :users" just creates a table in the database for a list
of all the users (which I guess I''d want in addition to their
individual
2006 Apr 22
5
ActiveRBAC 0.3.1 Released
Hi
I am happy to announce the 0.3.1 release of ActiveRBAC Engine. The
biggest improvement on the 0.3 release is that it runs with Rails 1.1
now.
Get your personal copy now from
https://activerbac.turingstudio.com/releases :)
There is a manual PDF with a tutorial available at
https://activerbac.turingstudio.com/releases/ActiveRbacManual.pdf
which is also included in the full
2017 Aug 10
2
Kubernetes v1.7.3 and GlusterFS Plugin
short copy from a kubectl describe pod...
Events:
FirstSeen LastSeen Count From SubObjectPath Type Reason Message
--------- -------- ----- ---- ------------- -------- ------ -------
5h 54s 173 kubelet, k8s-bootcamp-rbac-np-worker-6263f70 Warning
FailedMount (combined from similar events): MountVolume.SetUp failed for
volume "pvc-fa4b2621-7dad-11e7-8a44-062df200059f" : glusterfs: