docbrown/docs/backend/authorization.md

title
Authorization

Authorization

Authorization is handled by the third-party gem Pundit through the authorize method which you can find in various controllers, look for statements like:

authorize @user

All authorization policies can be found in /app/policies.