Just a quick note to say that RESTful_ACL has been updated. This latest version supports securing non-CRUD actions. It’s a slight cop out of sorts; essentially if the user in question can read an object, they will also be able to do the non-CRUD action. It’s not the best solution to the problem, but it will work for the moment. Maybe there is a slick way to pass in a function name as a hash/block thing that I’m not sure of. Hrm.













