rails before_action困境

Question

現在只有current_user可以編輯自己的帳號，但只有admin可以刪除帳號。不知道如何授予管理員編輯用戶權限，因爲current_user函數正在阻止它。

users_controller.rb

class UsersController < ApplicationController 
    before_action :logged_in_user, only: [:index, :edit, :update, :destroy] 
    before_action :correct_user, only: [:edit, :update] 
    before_action :admin_user,  only: [:index, :destroy] 

... 

private 

... 

    # Confirms the correct user. 
    def correct_user 
     @user = User.find(params[:id]) 
     redirect_to(root_url) unless current_user?(@user) 
    end 

    # Confirms an admin user. 
    def admin_user 
     redirect_to(root_url) unless current_user.admin? 
    end 
end 

Answer 1

可以爲管理員添加檢查。

def correct_user 
    @user = User.find(params[:id]) 
    redirect_to(root_url) unless (current_user?(@user) || current_user.admin?) 
end 

Answer 2

難道你不能定義一個新的方法，爲正確的用戶或管理員返回true？

# Confirms an admin or user. 
def admin_or_correct_user 
    unless current_user.admin? || current_user?(@user) 
    redirect_to(root_url) 
    end 
end