如何使嵌套資源受限制

Question

所以我有我的網絡應用程序設置允許用戶創建一個只能由他們的團隊看到的項目。在項目中，可以創建任務。我希望這些任務僅限於其創建的項目。但是，當我創建兩個單獨的項目並導航到視圖屏幕時，我在每個項目下看到相同的任務。

TasksController

def index 
    project = Project.find(params[:project_id]) 

    @task = project.tasks 

    respond_to do |format| 
    format.html # index.html.erb 
    format.xml { render :xml => @tasks } 
    end 
    @task = Task.order('title').page(params[:page]).per(4) 
end 

def show 
    project = Project.find(params[:project_id]) 

    @task = project.tasks.find(params[:id]) 

    respond_to do |format| 
    format.html # show.html.erb 
    format.xml { render :xml => @task } 
    end 
end 

ProjectsController

def index 
    @project = current_account.projects 
end 

def show 
    @project = current_user.projects.find(params[:project_id]) 
end 

路線

resources :projects do 
     resources :tasks 
end 

Answer 1

我覺得你的問題是早晚的事使用@task和@tasks

def index 
    project = Project.find(params[:project_id]) 

    # if I follow your program 
    # this should be @tasks 
    @tasks = project.tasks 

    respond_to do |format| 
    format.html # index.html.erb 
    # here you render @tasks 
    format.xml { render :xml => @tasks } 
    end 
    @task = Task.order('title').page(params[:page]).per(4) 
end 

def show 
    project = Project.find(params[:project_id]) 

    @task = project.tasks.find(params[:id]) 

    # simple check makesure @task is child of project 
    if @task.project_id == project.id 
     respond_to do |format| 
     format.html # show.html.erb 
     format.xml { render :xml => @task } 
     end 
    end 
end