We're trying to lock down a wagn to only allow folks who are logged in to be able to view *any* cards, except for the login. Is there a way to do this?

 

 

There's not a super easy way to change permission on all the existing cards.  If you change permissions on *all+*default, it will affect most new cards.  You could also use the rails console to loop through the cards and change them through the card api.  something like Card.search({}).each{ |c| c.permit(:read, Role[:auth]) }

 

If you were going to do a new installation, you might also set up a new permissions option in bootstrap.rake.


by the way, the new sets/settings based permissions system will make all of this much easier.

  --Ethan McCutchen.....Tue Jan 04 20:16:18 -0800 2011