Create secure Pundit authorization policies with deny-by-default and RSpec tests.
npx skills add https://github.com/reckerswartz/resume_builder --skill policy-reckerswartz
Please help me install this Agent Skill. Skill: policy Source: https://github.com/reckerswartz/resume_builder/tree/main/.devin/skills/policy Command: npx skills add https://github.com/reckerswartz/resume_builder --skill policy-reckerswartz
Pundit-based authorization policies can be easily misconfigured, creating security gaps or brittle tests. This Skill provides a structured approach to building secure, deny-by-default policies with clear role-based access, scoping rules, and deterministic testing.
Create a new policy under app/policies, add corresponding specs under spec/policies, and run the test suite to verify behavior.
High-intent search queries and answers about installing and using this skill.
Deny-by-default Pundit authorization policies are established by creating structured policy files under app/policies that enforce role-based access and scoping rules. This approach ensures secure access control by restricting permissions unless explicitly permitted.
RSpec tests for Pundit policies are generated by adding corresponding spec files under spec/policies using deterministic policy spec templates. Running the test suite verifies behavior across models, controllers, and views to ensure comprehensive authorization coverage.
Role-based access control with Pundit is enforced by defining reusable policy patterns like Basic CRUD with owner checks, role-based access, and state-conditioned actions. This reduces authorization drift and accelerates safe feature rollout in Rails apps.
Pundit can be used for non-model actions by applying headless policies. These allow authorization enforcement for controller actions that do not map directly to ActiveRecord models, maintaining consistent access control logic.
No additional dependencies are required. The approach relies solely on standard Pundit and RSpec patterns like ApplicationPolicy and Scope, leveraging existing Rails conventions to ensure maintainable and testable authorization.
reckerswartz...
reckerswartzImplement Pundit-based authorization policies with RSpec tests for Rails apps.
stereosupersonicScaffold Ruby on Rails applications with models, controllers, and JWT authentication.
ryan-nguyen-01Implement RBAC and PBAC with role hierarchies, guards, and JWT-embedded permissions.
