[openstreetmap/openstreetmap-website] WIP: Move to CanCanCan for authorization (#2023)

[Tom Hughes]

I think so, and long term it should mean we can get rid of `setup_user_auth` and having to remember to call it on requests that may need to be authorised and just have the CanCan setup trigger the checks automatically.

Fully achieving that will require also handling basic auth when setting up abilities. Plus we'll have to figure out what to do with the user blocks check...

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/2023#issuecomment-432694867
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20181024/01766ccc/attachment.html>