如何在設計中更改沒有當前密碼的密碼？

Question

我使用devise爲authentication和我有每個用戶的role，我允許與admin角色的用戶創建新的用戶，我想管理員用戶edit the password爲用戶剩下的，如果他們忘記了自己的密碼。但是我無法在編輯中改變沒有當前密碼的密碼。那麼我怎樣才能允許管理員用戶通過編輯用戶密碼來改變密碼，並像我們爲其餘的值一樣保存。

Answer 1

有一個方法內置設計稱爲update_without_password。

下面是我用我的更新方法是什麼：

# PUT /manage_users/1 
    # PUT /manage_users/1.json 
    def update 
    @user = User.find(params[:id]) 
    able_to_edit_profile? 

    # required for settings form to submit when password is left blank 
    if params[:user][:password].blank? 
     params[:user].delete("password") 
     params[:user].delete("password_confirmation") 
    end 

    respond_to do |format| 
     if @user.update_attributes(params[:user]) 
     @user.save   

     # sign the user in with their new password so it doesn't redirect to the login screen 
     sign_in @user, :bypass => true 

     format.html { 
      flash[:notice] = 'User was successfully updated.' 
      redirect_to session.delete(:return_to) 
     } 
     format.json { head :no_content } 
     else 
     format.html { render action: "edit", notice: 'Error updating user.' } 
     format.json { render json: @user.errors, status: :unprocessable_entity } 
     end 
    end 
    end 

private 

    # If the user is not an admin and trying to edit someone else's profile, redirect them 
    def able_to_edit_profile? 
    if !current_user.try(:admin?) && current_user.id != @user.id 
     flash[:alert] = "That area is for administrators only." 
     redirect_to :root 
    end 
    end 

Answer 2

由於update_without_password仍然需要current_password更新密碼，你就必須有一個update這樣的：

def update 
    # required for settings form to submit when password is left blank 
    if params[:user][:password].blank? 
     params[:user].delete("password") 
     params[:user].delete("password_confirmation") 
    end 

    @user = User.find(current_user.id) 
    if @user.update_attributes(params[:user]) 
     set_flash_message :notice, :updated 
     # Sign in the user bypassing validation in case his password changed 
     sign_in @user, :bypass => true 
     redirect_to after_update_path_for(@user) 
    else 
     render "edit" 
    end 
    end 

這示例用於更新當前用戶（包括用戶的密碼），但您可以對其進行修改以適應您的需求。

Answer 3

@user.update_attributes(password: params[:user][:password])