From: John Joyce Date: 2007-07-29T13:28:59+09:00 Subject: Re: User Authentication and permissions On Jul 26, 2007, at 3:44 PM, Jacko wrote: > This may be a bit too open ended but what is the best way to add user > authentication and security services to a ruby on rails app. Is there > a standard API or Framework to achieve this? > > There are a few ways, one is well covered in the AWDWR book. The other is similar but cleaner for you. A plugin called: acts_as_authenticated Essentially things are separated into different controllers. Controllers that require authentication or login of some kind are not accessible without that. That means the URL/URI's generated by their methods/actions cannot be accessed without authentication. Everything in the controllers that don't require authentication are accessible. (basically, though this is all a very simplified description, but Rails does make it all pretty easy) But check out the Ruby Talk list at Google groups. That's the best place to ask Rails-specific questions. This list may get you some answers, as Rails does use Ruby and libraries written in Ruby. Depends on the topic