Posts

Showing posts from June, 2026

Code Post: Building Relationship-Based Access Control in Ruby on Rails

Image
Y'all have seen me do personal posts and cinema posts. Now it's time for the code posts. If you are here for me ranting about cinema or whining about my life and don't want to read about me nerding out to code I promise not to take it personal. I'm also assuming a target audience of this blog of someone who has familiarity with database architecture. I'll still be back next week and I promise I'll do code posts at most once a month. So! Relationship-Based Access Control! Also known as "Fine Grain Access Control" it stands in contrast to "Role-Based Access Control" which, if you have familiarity with authorization systems, you probably have heard of, or at least know about. It's management of access to areas and data based off of the role a user has: like an admin could go anywhere but someone with a "Financial Manager" role wouldn't be able to edit permissions of another user. If  you're familiar with Role-Based Access C...