Authentication is "are you who you say you are". It establishes a session with the browser, and uses a login to check credentials before allowing that session to see anything you've protected from public view. Authorization uses a method like you describe, which allows certain _authenticated_ people to do certain things. You can't have authorization without authentication -- they build on one another. But they solve different problems than one another.
Walter On Oct 21, 2013, at 12:40 PM, Walter Lee Davis wrote: > CanCan is an Authorization solution, not an Authentication solution. Devise > is Authentication only, and relies on CanCan or another Authorization > framework to do that part of the job. Apples and Oranges, I'm afraid. > > Walter > > On Oct 21, 2013, at 12:34 PM, desbest wrote: > >> What is your favourite authentication gem and why? >> Right now I have 4 to choose from (Cancan, Clearance, Rails Cast) and I >> don't know which one to pick. >> I cannot use Device because I'm a beginner at Rails. >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Ruby on Rails: Talk" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To post to this group, send email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/rubyonrails-talk/d9253b08-eab7-4b9f-963c-9fae647f0f70%40googlegroups.com. >> For more options, visit https://groups.google.com/groups/opt_out. > > -- > You received this message because you are subscribed to the Google Groups > "Ruby on Rails: Talk" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/rubyonrails-talk/37308DAC-EF52-4903-8F36-07409FEF55F4%40wdstudio.com. > For more options, visit https://groups.google.com/groups/opt_out. -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/rubyonrails-talk/7B996034-CFE1-4BE1-8C84-859FCCE5665E%40wdstudio.com. For more options, visit https://groups.google.com/groups/opt_out.
