pundit-authorization

What problem does it solve?

In multi-tenant Rails applications, authorization is hard to implement consistently. This skill provides reusable Pundit patterns to enforce organization scoping and guardrails across models, controllers, and views.

Core Features & Use Cases

• ApplicationPolicy and Scope base the authorization model with default organization scoping.
• OwnedByOrganization integration to enforce multi-tenant data isolation on models.
• Controller and View Integration patterns to enforce policy checks and conditional UI.
• Nested, STI, and Custom Policies coverage for common data models and complex scenarios.
• Use Case: Ensure a user can only access and modify records within their organization and automatically scope queries via policy_scope.

Quick Start

Apply the recommended Pundit policies to a resource (e.g., Post) to enforce organization-based access.