ActiveAdmin ForbiddenAttributesError

Question

我是Ruby on Rails的全新產品。 我使用的是ActiveAdmin和我有創造ADMINUSER

::加載ActiveModel在ForbiddenAttributesError管理員::問題AdminUsersController＃創建 ::加載ActiveModel ForbiddenAttributesError

請求

參數：

• { 「UTF8」=> 「✓」，

• 「authenticity_token」=> 「NVV ++ 6GNTdA/nDzw1iJ6Ii84pZPcv2mzg0PK2Cg9Ag0 =」，

• 「admin_user」=> { 「電子郵件」=> 「admin2@example.com」}，

• 「提交」=> 「創建管理員用戶」} *

---

條的Rails 4.1.0

activeadmin 1.0.0

紅寶石2.1

---

應用/管理/ admin_user.rb

ActiveAdmin.register AdminUser do 
    index do 
     column :email 
     column :current_sign_in_at 
     column :last_sign_in_at 
     column :sign_in_count 
     default_actions 
    end 

    form do |f| 
     f.inputs "Admin Details" do 
      f.input :email 
     end 
     f.actions 
    end 
end 

應用程序/楷模/ admin_user.rb

class AdminUser < ActiveRecord::Base 
    # Include default devise modules. Others available are: 
    # :confirmable, :lockable, :timeoutable and :omniauthable 
    devise :database_authenticatable, 
      :recoverable, :rememberable, :trackable, :validatable 

    after_create { |admin| admin.send_reset_password_instructions } 

    def password_required? 
     new_record? ? false : super 
    end 
end 

的Gemfile

source 'https://rubygems.org' 

gem 'rails', '4.1.0'             
gem 'sqlite3'              
gem 'sass-rails', '~> 4.0.3'           
gem 'uglifier', '>= 1.3.0'           
gem 'coffee-rails', '~> 4.0.0'          
gem 'jquery-rails'             
gem 'turbolinks'              
gem 'jbuilder', '~> 2.0'            
gem 'activeadmin',  github: 'gregbell/active_admin' 
gem 'polyamorous',  github: 'activerecord-hackery/polyamorous' 
gem 'ransack',   github: 'activerecord-hackery/ransack'  
gem 'formtastic',  github: 'justinfrench/formtastic'   
gem 'devise' 

gem 'sdoc', '~> 0.4.0', group: :doc 

配置/環境/ development.rb

Rails.application.configure do 
    # Settings specified here will take precedence over those in config/application.rb. 

    # In the development environment your application's code is reloaded on 
    # every request. This slows down response time but is perfect for development 
    # since you don't have to restart the web server when you make code changes. 
    config.cache_classes = false 

    # Do not eager load code on boot. 
    config.eager_load = false 

    # Show full error reports and disable caching. 
    config.consider_all_requests_local  = true 
    config.action_controller.perform_caching = false 

    # Don't care if the mailer can't send. 
    config.action_mailer.raise_delivery_errors = false 

    # Print deprecation notices to the Rails logger. 
    config.active_support.deprecation = :log 

    # Raise an error on page load if there are pending migrations. 
    config.active_record.migration_error = :page_load 

    # Debug mode disables concatenation and preprocessing of assets. 
    # This option may cause significant delays in view rendering with a large 
    # number of complex assets. 
    config.assets.debug = true 

    # Adds additional error checking when serving assets at runtime. 
    # Checks for improperly declared sprockets dependencies. 
    # Raises helpful error messages. 
    config.assets.raise_runtime_errors = true 

    # Raises error for missing translations 
    # config.action_view.raise_on_missing_translations = true 

    # Sending emails works 
    config.action_mailer.default_url_options = { :host => 'localhost:3000' } 
end 

Answer 1

Rails 4使用強大的參數，其移動屬性白名單從模型到控制器。有必要指定您想要保存在數據庫中的屬性。您沒有允許代碼中的屬性，這就是您收到ActiveModel::ForbiddenAttributesError的原因。

參考的ActiveAdmin : Setting up Strong Parameters

的文檔，你可以通過以下方式建立強大的參數，使用permit_params方法覆蓋create或update動作時，它創建了一個名爲permitted_params方法，使用這種方法：

ActiveAdmin.register AdminUser do 
    ## ... 
    permit_params :attr1, :attr2 ## Add this line 
end 

將:attr1,:attr2等替換爲您要加入白名單的實際屬性名稱。例如：:email

Answer 2

你看到的是新版本Rails的安全特性。您必須爲屬性創建白名單，這些屬性可以由用戶輸入的參數更新。否則，您將不得不手動設置每個值。

這裏的白名單某則params的一個樣本：

ActiveAdmin.register Post do 
    permit_params :title, :content, :publisher_id 
end 

見關於這一主題的ActiveAdmin文檔： https://github.com/gregbell/active_admin/blob/master/docs/2-resource-customization.md#setting-up-strong-parameters