慘慘：創造能力

Question

我有以下代碼：

#/app/models/users/user.rb 
class Users::User < ActiveRecord::Base 
    has_many :phones, class_name: "Users::Phone" 
end 

#/app/models/users/phone.rb 
class Users::Phone < ActiveRecord::Base 
    belongs_to :user, class_name: "Users::User" 
    attr_accessible :phone 
end 


#/app/models/ability.rb 
class Ability 
    include CanCan::Ability 

    def initialize(user) 

    can :read, :all 

    unless user.nil? #logged_in 
     if user.is? :admin 
     can :manage, :all 
     else 
     can :create, Users::Phone, user_id: user.id 
     end 
    end 

    end 
end 

我想檢查能力只能創建自己的用戶

#/app/views/users/users/show.html.slim 
- if can? :create, Users::Phone.new 
    a[href="#{new_user_phone_path(@user)}"] Add phone 

那不行自己的手機，因爲我應該USER_ID傳遞給手機型號（如Users::Phone.new user_id: user.id），但自電話的質量分配以來我無法做到這一點。

所以，我怎麼可以檢查用戶:create手機的能力？

Answer 1

我做類似這樣的東西在我的應用程序通過使Ability瞭解底層參數結構。根據您的要求，您有幾個選項。因此，在你的控制器，你就會有大約：

def create 
    @phone = Users::Phone.new(params[:users_phone]) 

    # Optional - this just forces the current user to only make phones 
    # for themselves. If you want to let users make phones for 
    # *certain* others, omit this. 
    @phone.user = current_user 

    authorize! :create, @phone 
    ... 
end 

在ability.rb

則：

unless user.nil? #logged_in 
    if user.is? :admin 
    can :manage, :all 
    else 
    can :create, Users::Phone do |phone| 
     # This again forces the user to only make phones for themselves. 
     # If you had group-membership logic, it would go here. 
     if phone.user == user 
     true 
     else 
     false 
     end 
    end 
    end 
end