* removed the auditing observer, we'll do it the old fashioned way

* added permission model
* locked down attributes on page model

1 files changed, 10 insertions, 0 deletions

diff --git a/app/models/permission.rb b/app/models/permission.rb
new file mode 100644
index 0000000..1070b7a
--- /dev/null
+++ b/app/models/permission.rb
@@ -0,0 +1,10 @@
+class Permission < ActiveRecord::Base
+  validates_presence_of :user_id, :node_id, :granted
+  
+  # Associations
+  belongs_to :user
+  belongs_to :node
+  
+  # Security
+  attr_protected :user_id, :node_id, :granted # Allow no mass assignments
+end