Developers can only edit their own profile about railsdevs.com

[stevepolitodesign]

Pundit is one of those gems that I reach for with every Rails project. It can even be used to create feature flags, but clearly I'm biased 🤣

[stevepolitodesign]

@Tonksthebear as @joemasilotti mentioned, I recommend you branch off of #13. That way you'll have everything you need to create a DeveloperPolicy with Pundit. I recommend running rails g pundit:policy developer since it will create the appropriate file.

[Tonksthebear]

Thanks for the suggestion @stevepolitodesign

Unless I'm missing something, there isn't much room to progress #13 until users are actually in. I know #7 seems to be sorting out to go about managing Users and Accounts.

It seems like I should hold off on moving forward until someone actually implements Devise so that I can reference the current_user

[joemasilotti]

I'd just double check with @stevepolitodesign and @Tonksthebear because they commented earlier. Other than that, anyone can work on anything and I'll make sure to review all PRs.

[Tonksthebear]

Sounds good 👍 happy to take it over

[stevepolitodesign]

I strongly recommend we adopt some kind of authorization system (like pundit) to help build this and future features.

This will help keep authorization logic consistent and reliable.

[joemasilotti]

I've never used pundit, but it looks promising. If it ends up being less code to manage then I'm all for it.

[Tonksthebear]

I've historically used cancancan. I'm not trying to advocate it's better, just wondering if you know what the benefits of using pundit are instead of something like cancancan?

[ashawareb]

Hey @joemasilotti
I can work on this one if it's not assigned to anyone yet

[Tonksthebear]

I'd just double check with @stevepolitodesign and @Tonksthebear because they commented earlier. Other than that, anyone can work on anything and I'll make sure to review all PRs.

I'm happy to get an update out, but I'd do it with cancancan. So whatever direction you want to take! I'm happy to get a PR in if you choose cancancan, but @stevepolitodesign should take it if you want to use pundit

[joemasilotti]

pundit is my vote for now!

[stevepolitodesign]

@joemasilotti I created a PR #13 that installs Pundit. Once merged, someone, can take over this issue 👍

[joemasilotti]

Thanks @stevepolitodesign! @Tonksthebear, I recommend you work off of @stevepolitodesign's PR #13.

[joemasilotti]

Sounds great, @Tonksthebear! One more heads up, there's another issue, #7, that might be blocking this. Make sure to check in there so no effort is duplicated. :)

[joemasilotti]

FYI, #7 is done with basic users and authentication.

[Tonksthebear]

Awesome! I'll knock that out ASAP