views:

407

answers:

4

Hi guys,

Please name RoR authorization plugins with Rails 3 support, which you think is the best.

Regards, Alexey Zakharov

A: 

I recommend devise.

Tass
+6  A: 

I would highly recommend Devise - it works perfectly with Rails 3, and in my experience the developers are very helpful in answering questions in the Devise Google Group. There are also two railscasts on Devise - http://railscasts.com/episodes/209-introducing-devise and http://railscasts.com/episodes/210-customizing-devise. CanCan is an authorization solution that can be used in tandem with Devise - check out the Railscast, this plugin again works great with Rails 3. Hope that helps!

Sonia
It's also worth noting that Devise is actually more than a simple plugin - it is a rails engine. This means that Devise is essentially a miniature rails application (complete with its own routes and views) that integrates with and enhances your own, while allowing you to override any part of the engine you want (such as the views or routes).
Chris
Authlogic is still the biggest, but to start a new site from scratch, devise is much easier. Authlogic is just the backend, and can integrate with any existing site, and it is around longer. Devise is the new kid on the block, it uses warden, is a rails engine. Devise integrates perfectly with Rails3. Authlogic works in rails3 but that is less obvious (it took me a while).
nathanvda
Devise is used for **authentication** not **authorization**, these are two different things.
clyfe
+1  A: 

Hi Alexey

Authlogic (http://github.com/binarylogic/authlogic) is a great rails authorization solution, and it works in rails3 as well

And if you want to check if a plugin is compatible with rails 3 go here

http://www.railsplugins.org/

hope this helps

cheers

sameera

sameera207
+7  A: 

Hi Alexey,

Do you need an Authorization or Authentication plugin? It seems that everyone is giving you Authentication plugin.

Authentication

To verify user with its credentials so she can get in to the system

devise is one of Authentication plugin that works well (out of the box) with Rails 3:

Authorization

To verify whether the logged in user is allowed to access certain feature in the system

Here are the list of Authorization plugin in Rails (that works well with Rails 3).

CanCan is much simpler and straight forward. Decl_auth is much cleaner and can get pretty difficult to work with at some stage. Hope that helps.

jpartogi
Why does this get downvoted?
jpartogi