One account several users with different privileges

Rails
1

My app needs to have an account with several users inputting tasks on
the same account. Only one of the users (the one that opened the
account) will have admin privileges.

I’m thinking on using Authlogic for authentication and CanCan for
determining user privileges. The point is that I’d like the User that
opened the Account to be admin by default being him the only one to be
able to create other Users for his account with a different privileges.

2

I’m working on something similar right now. I created a very simple
login/authentication method and now I’m dealing with users privileges
in the site.

In my case I have posts that belongs to companies so only users from
the post’s company can view them. Also each user has roles (Admin) to
edit, remove, etc and (Some Role) to view exclusive posts.

I’m taking a look to both CanCan and Canable (http://github.com/
jnunemaker/canable)

I’ll keep updating. Any preference on plugin or would it be better to
write some custom code?

3

Carlos Cabrera wrote:

I’m working on something similar right now. I created a very simple
login/authentication method and now I’m dealing with users privileges
in the site.

In my case I have posts that belongs to companies so only users from
the post’s company can view them. Also each user has roles (Admin) to
edit, remove, etc and (Some Role) to view exclusive posts.

I’m taking a look to both CanCan and Canable (http://github.com/
jnunemaker/canable)

I’ll keep updating. Any preference on plugin or would it be better to
write some custom code?

My idea is when you sign up for an account you should fill up the
account name (Company) and the first users data (First name, Last, etc)
Being this first user the only Admin user.
From there that Admin user will create new users capable of adding tasks
to that account (company).
How would you approach this?

4

We had a similar problem - we did it this way: set a global string
ADMINCODE = “somethingImpossibleToGuess” and include a text field for
this in the signup form. If the user can enter an admin code, then
they get to be admin.