Good morning guys. I configured Pundit with Devise in AVO and the default policy defined in ApplicationPolicy is not applied in models that do not have a policy. Model-specific policies function correctly. Could someone help me to correctly configure the default policy in the ApplicationPolicy?

that is the default behavior

I expressed myself badly. I meant that the default policy is not applied at any time, if you assign false in the default policy for all actions (:Index, :create ...), and there is no specific policy for any model, I can browse all of them without problem the models. The default policy has no effect on the system. However, if you create a model-specific policy, putting the same content added in the default policy, false for all actions, the model-specific policy works normally. I would like the default policy to work for all models that have not created a specific policy.

> I would like the default policy to work for all models that have not created a specific policy. that is not a feature in Avo

Thanks Adrian, the setting "config.raise_error_on_missing_policy = true" will help a lot, I was already using it. I'm creating a function to get the name of all the models and run rails generate avo:action in the Shell, to create them all at once.

That’s the perfect solution

Hello @microscopic-dream-82397, we have this custom policy feature where you can, for each resource, define what policy class to use. In your case, if you want a general policy for all or some of the resources you can configure it. https://docs.avohq.io/2.0/authorization.html#custom-policies Add this line on all the resources that you want to respect the

ApplicationPolicy

ruby
self.authorization_policy = ApplicationPolicy

Obrigado, Paul. Ajudará bastante na hora de agrupar as políticas

De nada 😄