Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Read-only user impersonation in Rails

Many support tools eventually grow a "log in as this customer" feature. Ours had a problem the usual gems don't solve. The people on the other side of the button are customers of a service containing…

  • ViewingAs gem restricts administrators from sensitive actions during impersonation
  • Prevents non-GET/HEAD requests and logs write attempts at error level
  • Consent lambda determines impersonation based on customer preferences

More from Wednesday 23 September →