<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for steffenbartsch</title>
	<atom:link href="http://steffenbartsch.com/blog/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://steffenbartsch.com/blog</link>
	<description>Security, Usability, Rails</description>
	<lastBuildDate>Tue, 26 Apr 2011 13:05:27 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1.2</generator>
	<item>
		<title>Comment on Rails Authorization Plugins by vladimir prieto</title>
		<link>http://steffenbartsch.com/blog/2008/08/rails-authorization-plugins/comment-page-1/#comment-8127</link>
		<dc:creator>vladimir prieto</dc:creator>
		<pubDate>Tue, 26 Apr 2011 13:05:27 +0000</pubDate>
		<guid isPermaLink="false">http://stffn.wordpress.com/?p=11#comment-8127</guid>
		<description>been checking one by one on the list, and the most part of it is outdated/left/does&#039;nt exist.

this list must definitely be updated!</description>
		<content:encoded><![CDATA[<p>been checking one by one on the list, and the most part of it is outdated/left/does&#8217;nt exist.</p>
<p>this list must definitely be updated!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Rails Authorization Plugins by Tilo</title>
		<link>http://steffenbartsch.com/blog/2008/08/rails-authorization-plugins/comment-page-1/#comment-8050</link>
		<dc:creator>Tilo</dc:creator>
		<pubDate>Sat, 16 Apr 2011 15:20:04 +0000</pubDate>
		<guid isPermaLink="false">http://stffn.wordpress.com/?p=11#comment-8050</guid>
		<description>+1 for updating this really useful list, and adding Can Can :-)

It would be good to provide an example or tutorial on how to integrate declarative_authorization with devise</description>
		<content:encoded><![CDATA[<p>+1 for updating this really useful list, and adding Can Can :-)</p>
<p>It would be good to provide an example or tutorial on how to integrate declarative_authorization with devise</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Rails Authorization Plugins by sermojohn</title>
		<link>http://steffenbartsch.com/blog/2008/08/rails-authorization-plugins/comment-page-1/#comment-5558</link>
		<dc:creator>sermojohn</dc:creator>
		<pubDate>Mon, 06 Sep 2010 22:38:47 +0000</pubDate>
		<guid isPermaLink="false">http://stffn.wordpress.com/?p=11#comment-5558</guid>
		<description>Hi, 

some people have asked for a plug-in that could keep the roles assignment in the database, so that the role management can be dynamically configured. Is anyone aware of a good plug-in that implements this requirement?

Many thanx in advance!</description>
		<content:encoded><![CDATA[<p>Hi, </p>
<p>some people have asked for a plug-in that could keep the roles assignment in the database, so that the role management can be dynamically configured. Is anyone aware of a good plug-in that implements this requirement?</p>
<p>Many thanx in advance!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Rails Authorization Plugins by Julien Palmas</title>
		<link>http://steffenbartsch.com/blog/2008/08/rails-authorization-plugins/comment-page-1/#comment-5098</link>
		<dc:creator>Julien Palmas</dc:creator>
		<pubDate>Wed, 26 May 2010 13:12:05 +0000</pubDate>
		<guid isPermaLink="false">http://stffn.wordpress.com/?p=11#comment-5098</guid>
		<description>Hi,

Looks like you haven&#039;t added Cancan yet to your list.
That would be a great plus to this already very good reference page.

Thanks in advance ;-)</description>
		<content:encoded><![CDATA[<p>Hi,</p>
<p>Looks like you haven&#8217;t added Cancan yet to your list.<br />
That would be a great plus to this already very good reference page.</p>
<p>Thanks in advance ;-)</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on declarative_authorization 0.4 by Steffen Bartsch</title>
		<link>http://steffenbartsch.com/blog/2009/11/declarative_authorization-0-4/comment-page-1/#comment-4807</link>
		<dc:creator>Steffen Bartsch</dc:creator>
		<pubDate>Thu, 15 Apr 2010 07:28:48 +0000</pubDate>
		<guid isPermaLink="false">http://steffenbartsch.com/blog/?p=139#comment-4807</guid>
		<description>You are right.  Now it&#039;s correct.</description>
		<content:encoded><![CDATA[<p>You are right.  Now it&#8217;s correct.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on declarative_authorization 0.4 by Matt Schick</title>
		<link>http://steffenbartsch.com/blog/2009/11/declarative_authorization-0-4/comment-page-1/#comment-4805</link>
		<dc:creator>Matt Schick</dc:creator>
		<pubDate>Thu, 15 Apr 2010 02:11:33 +0000</pubDate>
		<guid isPermaLink="false">http://steffenbartsch.com/blog/?p=139#comment-4805</guid>
		<description>Not to nitpick, but you&#039;re missing a closing curly brace in your first example for your improved DSL, it should be as follows:

has_permission_on :companies, :to =&gt; :read do
  if_attribute :branches =&gt; { 
      :manager =&gt; { :last_name =&gt; is { user.last_name } } }
  if_permitted_to :read, :branches
end</description>
		<content:encoded><![CDATA[<p>Not to nitpick, but you&#8217;re missing a closing curly brace in your first example for your improved DSL, it should be as follows:</p>
<p>has_permission_on :companies, :to =&gt; :read do<br />
  if_attribute :branches =&gt; {<br />
      :manager =&gt; { :last_name =&gt; is { user.last_name } } }<br />
  if_permitted_to :read, :branches<br />
end</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Rails Authorization Plugins by Choosing an authorization framework for rails &#171; Jabberwocky</title>
		<link>http://steffenbartsch.com/blog/2008/08/rails-authorization-plugins/comment-page-1/#comment-4343</link>
		<dc:creator>Choosing an authorization framework for rails &#171; Jabberwocky</dc:creator>
		<pubDate>Fri, 26 Feb 2010 19:40:08 +0000</pubDate>
		<guid isPermaLink="false">http://stffn.wordpress.com/?p=11#comment-4343</guid>
		<description>[...] I&#8217;m aware there are quite a few other plugins out there. If you found another one and you&#8217;re very happy about it, please share.     Tagged [...]</description>
		<content:encoded><![CDATA[<p>[...] I&#8217;m aware there are quite a few other plugins out there. If you found another one and you&#8217;re very happy about it, please share.     Tagged [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Rails Authorization Plugins by Brad Langhorst</title>
		<link>http://steffenbartsch.com/blog/2008/08/rails-authorization-plugins/comment-page-1/#comment-4314</link>
		<dc:creator>Brad Langhorst</dc:creator>
		<pubDate>Wed, 24 Feb 2010 21:08:14 +0000</pubDate>
		<guid isPermaLink="false">http://stffn.wordpress.com/?p=11#comment-4314</guid>
		<description>It seems that none of these plugins allow for dynamic permission setting (where an admin can grant permission on specific objects to roles in a live system).

Did I miss something?

Why not store the permissions in a table rather than in a file?</description>
		<content:encoded><![CDATA[<p>It seems that none of these plugins allow for dynamic permission setting (where an admin can grant permission on specific objects to roles in a live system).</p>
<p>Did I miss something?</p>
<p>Why not store the permissions in a table rather than in a file?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Rails Authorization Plugins by Luca B.</title>
		<link>http://steffenbartsch.com/blog/2008/08/rails-authorization-plugins/comment-page-1/#comment-4109</link>
		<dc:creator>Luca B.</dc:creator>
		<pubDate>Sat, 06 Feb 2010 20:46:26 +0000</pubDate>
		<guid isPermaLink="false">http://stffn.wordpress.com/?p=11#comment-4109</guid>
		<description>+ 1 for adding CanCan to the list: it is actually really usable, and could manage simple to complex scenarios
(thank you, Ryan Bates)</description>
		<content:encoded><![CDATA[<p>+ 1 for adding CanCan to the list: it is actually really usable, and could manage simple to complex scenarios<br />
(thank you, Ryan Bates)</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on declarative_authorization 0.4 by Steffen Bartsch</title>
		<link>http://steffenbartsch.com/blog/2009/11/declarative_authorization-0-4/comment-page-1/#comment-3723</link>
		<dc:creator>Steffen Bartsch</dc:creator>
		<pubDate>Thu, 31 Dec 2009 09:32:44 +0000</pubDate>
		<guid isPermaLink="false">http://steffenbartsch.com/blog/?p=139#comment-3723</guid>
		<description>For usage questions, please turn to the mailing list http://groups.google.com/group/declarative_authorization/

Actually, this should just work. Maybe you have an error elsewhere in your code.</description>
		<content:encoded><![CDATA[<p>For usage questions, please turn to the mailing list <a href="http://groups.google.com/group/declarative_authorization/" rel="nofollow">http://groups.google.com/group/declarative_authorization/</a></p>
<p>Actually, this should just work. Maybe you have an error elsewhere in your code.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

