Guest users (no current_user) about pundit HOT 3 CLOSED

Well, current_user could return nil then, which you could check in the actual Policy. Depending on the outcome of this you act.

from pundit.

I see, policy_scope() won't barf by not having current_user set then... should have checked for that :) thanks

from pundit.

What about doing this in application_controller?

include Pundit
def pundit_user
  current_user ||= User.new # guest user
end

from pundit.