Help with rails authlogic and authorization

I need help figuring out the best way to do this.

Im using declarative authorization gem.

I have 4 roles, admin, master, junior, subscriber.

When it comes to new users:

I want the admins to be able to create any kind of user they wish.

But I also want masters to be able to create users with master, junior or subscriber roles.

So whats the best way to make this secure?.

I need help on both sides, view and model/controller logic...

The view should display all 4 roles to the admin in the colletion_select but just the other 3 options to the masters....

The rest of the users dont have access to get to that view thanks to declarative auhorization.

And on the model/controller logic I want it to validate that the user being created is not an admin role if the user creating it is not an admin... dont kn开发者_Python百科ow how to do that either....Please help.

---

Ryan Bates did Railscasts on declarative_authorization and authlogic. I think the declarative authorization one in particular will help you get started and explain how to do the kinds of things you're trying to do in general. You can also read them on ASCIIcasts (declarative_authorization, authlogic).