Controller for Rails中的Current_user 4

时间:2013-07-27 20:12:25

标签: ruby-on-rails ruby devise ruby-on-rails-4

我有Listings Controller用户可以创建他们的列表。

为防止用户编辑其他用户列表,我只需更新

中的所有操作
Listing to current_user.listings

但是使用Rails 4控制器发生了变化,我找不到如何设置它。

我的控制器文件 - >

class ListingsController < ApplicationController
  before_action :set_listing, only: [:show, :edit, :update, :destroy]
    before_filter :authenticate_user!, :only => [:index]

  # GET /listings
  # GET /listings.json
  def index
    @listings = Listing.all
  end

  # GET /listings/1
  # GET /listings/1.json
  def show
  end

  # GET /listings/new
  def new
    @listing = Listing.new
  end

  # GET /listings/1/edit
  def edit
  end

  # POST /listings
  # POST /listings.json
  def create
    @listing = Listing.new(listing_params)

    respond_to do |format|
      if @listing.save
        format.html { redirect_to @listing, notice: 'Listing was successfully created.' }
        format.json { render action: 'show', status: :created, location: @listing }
      else
        format.html { render action: 'new' }
        format.json { render json: @listing.errors, status: :unprocessable_entity }
      end
    end
  end

  # PATCH/PUT /listings/1
  # PATCH/PUT /listings/1.json
  def update
    respond_to do |format|
      if @listing.update(listing_params)
        format.html { redirect_to @listing, notice: 'Listing was successfully updated.' }
        format.json { head :no_content }
      else
        format.html { render action: 'edit' }
        format.json { render json: @listing.errors, status: :unprocessable_entity }
      end
    end
  end

  # DELETE /listings/1
  # DELETE /listings/1.json
  def destroy
    @listing.destroy
    respond_to do |format|
      format.html { redirect_to listings_url }
      format.json { head :no_content }
    end
  end

  private
    # Use callbacks to share common setup or constraints between actions.
    def set_listing
      @listing = Listing.find(params[:id])
    end

    # Never trust parameters from the scary internet, only allow the white list through.
    def listing_params
      params.require(:listing).permit(:title, :description)
    end
end

任何人都知道解决方案吗?

1 个答案:

答案 0 :(得分:3)

从#new更改为build。因此,请将所有@listing = Listing.new更改为:

@listing = current_user.listings.build

然后,在set_listing中更改为:

@listing = current_user.listings.find(params[:id])