Learn Rails 6: Accelerated Web Development with Ruby on Rails

© Adam Notodikromo 2021

A. NotodikromoLearn Rails 6https://doi.org/10.1007/978-1-4842-6026-5_9

9. Friendship

Adam Notodikromo¹ 

(1)

Tokyo, Japan

 

In earlier chapters, you learned how to use Devise for authentication. We are requiring our users to sign in before accessing several pages in our app. However, in many scenarios, authentication is not enough. We need to implement access authorization as well.

To put it simply, access authorization is concerned with who can do what, who can access what, or who can see what. For instance, a user can set their profile to private, which limits their timeline only to their followers. This is authorization.

In this chapter, let’s see how we can implement access authorization using Bali. In the process, we will also ...