[openstreetmap/openstreetmap-website] Move to CanCanCan for authorization (#2023)

[Tom Hughes]

tomhughes commented on this pull request.



> @@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+class Capability

The name capability comes from us - it was something we built on top of OAuth 1 to associate a token with a set of things it was allowed to do.

OAuth 2 has something similar built in but calls them scopes where when an application requests a token it indicates what scopes it wants access to.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/2023#discussion_r230082770
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20181101/0e664cb2/attachment.html>