app/authorizers/application_authorizer.rb
# Other authorizers should subclass this one
class ApplicationAuthorizer < Authority::Authorizer
# Any class method from Authority::Authorizer that isn't overridden
# will call its authorizer's default method
#
# @param [Symbol] adjective; example: `:creatable`
# @param [Object] user - whatever represents the current user in your app
# @return [Boolean]
def self.default(adjective, user)
# 'Whitelist' strategy for security: anything not explicitly allowed is
# considered forbidden.
false
end
end