Create role based only on instance

[Kani999]

Is there an option to create roles that we can assign to instances only but not to the whole class?

I want to define a role scoped to a resource instance:

user = User.find(2)
user.add_role :moderator, Forum.first

But I want to disable defining role's scoped to a whole class

user = User.find(3)
user.add_role :moderator, Forum

Is there any way, that I can forbid the second choice?

[EppO]

Currently the only way to prevent it is through your application code. Rolify won't enforce it for you.
More generally, rolify's goal is to integrate with an authorization library, not to enforce any policies or rules.

[Kani999]

@EppO Thanks
I've already written my own library to override some actions that fit my use case.

So I'm closing the ticket.

[EppO]

Can you share your library? If it integrates with rolify, I can link it in the README like Cancan and Pundit

[Kani999]

@EppO
I've created a repository with some description of how my library works.
It's nothing revolutionary and bullet-proof, but it's possible that it might help someone.

Here's a link https://github.com/Kani999/rolify_restrictions

[Kani999]

@EppO
I added a docker-compose template to the repository above. So you could try the library.
Please try to run the Docker. It is my first template, so I hope it will work.