palkan/action_policy

Health v2 · maintenance only

Adoption not part of the score

1560 stars · 89 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Action Policy is an authorization framework for Ruby and Rails applications, built around resource-specific policy classes with composable rules, scoping, caching, and failure-reason tracking. It works Rails-free out of the box but offers seamless Rails, GraphQL, and Graphiti integrations plus first-class RSpec/Minitest testing tools.

Use cases

• authorize user actions in a Rails controller
• scope database queries to records a user can access
• replace Pundit with a more feature-rich policy framework
• add authorization to a non-Rails Ruby app or GraphQL API
• explain why an authorization check failed
• test authorization rules with RSpec matchers

When to choose

• you're building a Ruby or Rails app needing a flexible, composable authorization layer
• you want policy scoping, caching, aliases, and failure reasons beyond Pundit's simplicity
• you need authorization in GraphQL Ruby or Graphiti APIs

When to avoid

• you need a full roles/permissions management system rather than an access-verification layer
• you're not using Ruby
• you want a UI or database-backed permission admin

Facets

library · maturity stable

authorization middleware web-development backend security developer-tools ruby rails policies pundit-alternative cancancan-alternative graphql-integration i18n testing-matchers web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="palkan/action_policy")