In Ruby on Rails, authorization can be implemented at the controller level, action level, or attribute level: https://dev.to/povilasjurcys/method-level-permission-control-in-rails-4fl5