README.md in gds-sso-13.0.0 vs README.md in gds-sso-13.1.0
- old
+ new
@@ -102,9 +102,19 @@
authorise_user!('edit_publications')
end
end
```
+`authorise_user!` can be configured to check for multiple permissions:
+
+```ruby
+# fails unless the user has at least one of these permissions
+authorise_user!(any_of: %w(edit create))
+
+# fails unless the user has both of these permissions
+authorise_user!(all_of: %w(edit create))
+```
+
### Authorisation for API Users
In addition to the single-sign-on strategy, this gem also allows authorisation
via a "bearer token". This is used by publishing applications to be authorised
as an [API user](https://signon.publishing.service.gov.uk/api_users).