Using Pundit for authorization in Rails

Web applications involving user management has two parts to it, which is authentication and authorization. And you don’t get to authorization without authentication, as we can’t determine what you can do unless we know who you are in the first place.