Lockdown

My question is that I am using the plugin. Its great, but is it not a flaw that
the gem holds public_access rights as instance var, which
all rails application on one machine are accessing at the same time.

I have modified the gem to make model level permissions, 

 by storing lambda's  that you create and the system uses to filter model in question 

  and select only the model instances that you have rights for.

 But these lambda's can not be stored in the session, so I 

 access model permissions with method that goes into Lockdown::System and 

finds the lambda's for that model when requested from the @permissions hash.

 Anyway .. there is room for discussion there. 
and model permissions  or lamdas in @permissions[:model]. 

this works .. but could be improved,

also I found a bug where this method ( standard_authorized_user_rights )

def standard_authorized_user_rights

      Lockdown::System.public_access + Lockdown::System.protected_access 

end

def standard_authorized_user_rights

      Lockdown::System.public_access

end

was passing back all rights both public and protected.  How did lockdown ever work with 

this bug, I am not sure?

Anyway .. I like the flexibility not having the put code in the view to block links. Its really nice to hijak link_to that way.

~ Daniel