Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ADR to select an authorization gem #48

Merged
merged 2 commits into from
Jul 10, 2024
Merged

Conversation

jazairi
Copy link
Contributor

@jazairi jazairi commented Jun 25, 2024

Why these changes are being introduced:

We will need authorization in TACOS for the staff UI, which first requires us to choose an authorization gem.

Relevant ticket(s):

How this addresses that need:

This adds an ADR to select an authorization gem from among CanCanCan, Pundit, and Action Policy.

Side effects of this change:

The decision we make will affect how we implement authorization.

Why these changes are being introduced:

We will need authorization in TACOS for the staff UI, which
first requires us to choose an authorization gem.

Relevant ticket(s):

* [TCO-30](https://mitlibraries.atlassian.net/browse/TCO-30)

How this addresses that need:

This adds an ADR to select an authorization gem from among
CanCanCan, Pundit, and Action Policy.

Side effects of this change:

The decision we make will affect how we implement authorization.
@mitlib mitlib temporarily deployed to tacos-api-pipeline-pr-48 June 25, 2024 21:32 Inactive
@jazairi jazairi temporarily deployed to tacos-api-pipeline-pr-48 June 26, 2024 12:55 Inactive
Copy link
Member

@JPrevost JPrevost left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I support the decision to use CanCanCan. Our needs are likely to be simple for the foreseeable future and the additional features/speed of the alternatives do not outweigh the additional complexity/repetitiveness/boilerplate they require. If our needs change over time, I agree with the assessment here that we could migrate to another option when we better understand those needs.

Copy link
Member

@matt-bernhardt matt-bernhardt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for this writeup, and the links you've shared to the alternative gems under consideration.

I'm comfortable with this choice, and definitely find value in having a shared approach to shared problems like authorization across our applications.

:shipit:

@jazairi jazairi merged commit a31cd9b into main Jul 10, 2024
2 checks passed
@jazairi jazairi deleted the tco-30-authorization-adr branch July 10, 2024 15:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants