> I thought about creating groups, but then won't this complicate things?
> I'll have group_pages table, and how do I manage those? can a user
> belongs to many groups?

it's actually best to create a many-to-many relationship (user habtm
groups).
there are many plugins outthere that provide just what you need. if
you don't want to just use one of these (either a complete
authentication-plugin or just something like acts_as_role), you could
still take a look at them for inspiration.

> >   config.action_controller.session_store = :active_record_store
> after commenting the above line, I got an InvalidAuthentictyToken error,
> which probably comes from my login form.

just to make sure: you are using active_record_store now, right?

> I checked the markup and I can see the hidden field containing the
> authenticity token.. So I'm not sure why this messes up.

try to delete your browser's cookies and cache as well as your session
table. maybe you have a conflict with one of the old sessions/cookies.

additionally check that you have the following:
  # environment.rb:
  config.action_controller.session = {
    :session_key => '_myapp_session',
    :secret      => 'secretpass' # use a long and good secret!
  }

  config.action_controller.session_store = :active_record_store

  # application.rb
  protect_from_forgery :secret => 'secretpass'

that should do it.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to