VoileWeb.Auth.ControllerHelpers (Voile v0.1.27)

Helper functions for authorization in Phoenix controllers.

Summary

Authorize a user in a controller action. Raises UnauthorizedError if the user doesn't have permission.

Check if the current user has a permission.

Authorize a user in a controller action. Raises UnauthorizedError if the user doesn't have permission.

def delete(conn, %{"id" => id}) do
  authorize!(conn, "collections.delete", scope: {:collection, id})
  # ... rest of the action
end

Check if the current user has a permission.

if can?(conn, "collections.update", scope: {:collection, id}) do
  # Show edit button
end