I would say, make it possible, possibly in a separate method like Privilege.resources(privilege_set, methods, action = "POST") where methods is an array of method names. This is pretty consistent with the single-method version, easy to implement (methods.each |m| do resource(privilege_set, m, action) end) and a great extension to user-friendliness.
It would allow client code to specify complete privilege-sets at once, instead of going over them method-by-method, and this extends your API and its usability in a nice way.
|