[openstreetmap/openstreetmap-website] WIP: Move to CanCanCan for authorization (#2023)

[Andy Allan]

gravitystorm commented on this pull request.



> @@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+class Capability

I don't have any views on this, beyond what @cflipse wrote in the [commit message](https://github.com/openstreetmap/openstreetmap-website/pull/2023/commits/91fc65a2e3ad47414344a6d5dc03cb5fb2a08ce1) when he split them out.

To be blunt, I don't yet have a good understanding of how all the tokens stuff works, so I'm happy to take direction here. My experience elsewhere is just with straightforward approaches around having a current_user with particular roles, and our token handling here is more complex.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/2023#discussion_r225898334
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20181017/d80401f0/attachment.html>