How to implement security in Rails 3?

Question

Before using Rails 3 for demo purpose, I have to know how Rails 3 implements security.
Java web applications can use Spring Security framework or Apache Shiro framework.

Does Rails 3 has something similar?
Security is a high requirement for the demo, I can't ignite the demo unless I know how to implement security for Rails 3 application.

Answer 1

It may be worth reading this guide http://guides.rubyonrails.org/security.html

For authentication there are 2 very good solutions: Devise and Authlogic. For authorization I suggest CanCan