Episode #389 – Oct 27, 2012 – 112 comments

PostgreSQL Schemas can help create a multi-tenant app by keeping data separate at the database layer. Integrating with migrations can be tricky though, so watch this episode for the full details. (11 minutes)

Watch Episode Read Episode

Episode #388 – Oct 20, 2012 – 120 comments

A multi-tenant application can be difficult to implement because the data for each tenant must be completely separate. Here I show how to do this using subdomains and default scopes in Active Record. (12 minutes)

Watch Episode Read Episode

Episode #386 – Oct 11, 2012 – 97 comments

This finishes the series on building authorization from scratch by refactoring the permission logic into a DSL, restricting authorization with attributes, and combining with strong_parameters to protect params. (20 minutes)

Watch Episode Read Episode

Episode #385 – Oct 07, 2012 – 82 comments

Authorization can be difficult to implement and test because it often involves complex logic that exists throughout the entire app. Here I demonstrate how to test and implement authorization from scratch. (15 minutes)

Watch Episode Read Episode

Episode #371 – Aug 03, 2012 – 75 comments

The strong_parameters gem is an improvement over attr_accessible to securely handle mass assignment even when you have complex authorization logic. The functionality will likely be added to Rails 4 so it is a good idea to learn how it works. (12 minutes)

Watch Episode Read Episode

Episode #192 – Dec 14, 2009 – 114 comments

CanCan is a simple authorization plugin that offers a lot of flexibility. See how to use it in this episode. (15 minutes)

Watch Episode Read Episode

Episode #188 – Nov 16, 2009 – 114 comments

Declarative authorization provides an advanced and powerful solution for role based authorization. (15 minutes)

Watch Episode Read Episode