Re: Managing role-based permissions in Ring apps

2014-01-18 Thread Stefan Kamphausen
On Friday, January 17, 2014 8:29:21 PM UTC+1, Sam Ritchie wrote: > > Okay, here's my post: > http://sritchie.github.io/2014/01/17/api-authentication-with-liberator-and-friend/ > Gee, that's way more complicated than I expected. Thanks for sharing anyway! stefan -- -- You received this me

Re: Managing role-based permissions in Ring apps

2014-01-17 Thread Sam Ritchie
Okay, here's my post: http://sritchie.github.io/2014/01/17/api-authentication-with-liberator-and-friend/ This is basically everything I understand about Friend, plus my integrations with Liberator. The code's in this example project: https://github.com/paddleguru/liberator-friend Hope this h

Re: Managing role-based permissions in Ring apps

2014-01-13 Thread Christopher Allen
To clarify, that was an example of content negotiation middleware, not ACL. If I were to tackle this, I would try to find or implement a pure ACL (not aware of web apps per se) library and then hook it up via Ring middleware. On Monday, January 13, 2014 12:45:23 PM UTC-8, Christopher Allen wrote

Re: Managing role-based permissions in Ring apps

2014-01-13 Thread Christopher Allen
I might follow up with a more thorough reply, but I had to drop Friend for the same reason I had to drop Liberator. Customizing the assumptions/defaults the libraries made was too default. Relatively simple content negotiation involved trying to do insane monkey-patches of Liberator's protocols

Re: Managing role-based permissions in Ring apps

2014-01-13 Thread Alexandr Kurilin
Disclaimer: I think what Friend is trying to do is super important and cemerick rocks. However, I found Friend to be really difficult to grok the first time I took a stab at it many months ago, perhaps I'm more capable of getting into it now. My concern was that it is so broadly encompassing and t

Re: Managing role-based permissions in Ring apps

2014-01-12 Thread Stefan Kamphausen
On Monday, January 13, 2014 3:53:43 AM UTC+1, Sam Ritchie wrote: > > cemerick's Friend library is the way to do this: > > https://github.com/cemerick/friend > > I'm writing up a post on how to combine Friend with Liberator, for easy > ACL management for RESTful APIs. Take a look and let us know

Re: Managing role-based permissions in Ring apps

2014-01-12 Thread Sam Ritchie
cemerick's Friend library is the way to do this: https://github.com/cemerick/friend I'm writing up a post on how to combine Friend with Liberator, for easy ACL management for RESTful APIs. Take a look and let us know what you think! Alexandr Kurilin January 12, 2014

Managing role-based permissions in Ring apps

2014-01-12 Thread Alexandr Kurilin
My Ring app is undergoing growing pains: I think I need some kind of abstraction for managing user permissions when working with my RDBMS. Our system has few user roles and they all own or have rights to a bunch of data in a hierarchical fashion e.g. admin > manager > employee etc. So far I've got