Opening up an Avo admin without opening up everythingAugust 25, 2025SkillitRailsAvoPunditSecurityAt Skillit, I needed staff to do real operational work in Avo without giving every staff user superuser powers. Pundit policies turned that into a permission matrix I could reason about.