创建自定义视图rails权限

时间:2016-01-02 04:04:30

标签: ruby-on-rails-4 authentication devise models

在我的rails应用程序中,我有用户发布列表(产品)。我目前有一个特定于卖家的页面,其中登录用户可以查看他们自己的列表,并相应地管理它们。但是,我正在尝试将索引上的<p><%= "Sold by #{listing.user.name}" %></p>链接到卖家特定页面,并将此视图对任何人开放。我无法弄清楚如何实现这一目标!我似乎无法创建一个只显示所选用户列表的页面。任何帮助都会很棒

index.html.erb

<div class="jumbotron">
  <h1>Premium Brands from <br>
   local boutiques. </h1>
  <h2>Discover one-of-a-kind items</h2>
</div>

<div class="center">
  <div class="row">
    <% @listings.each do |listing| %>
      <div class="col-md-3">
      <div class="thumbnail">
       <%= link_to image_tag(listing.image.url), listing %>
        <div class="caption">
          <h3><%= listing.name %></h3>
          <p><%= number_to_currency(listing.price) %></p>
          <p><%= "Sold by #{listing.user.name}" %></p>
        </div>
      </div>
    </div>
    <% end %>
  </div>
</div>

<br>

<div class="center">
  <%= will_paginate @posts, renderer: BootstrapPagination::Rails %>
</div> 

<% if user_signed_in? %>

<div class="right">
    <%= link_to new_listing_path, class: "btn btn-primary", data: { no_turbolink: true } do %>
    <i class="glyphicon glyphicon-plus"></i> New Listing
    <% end %>
</div>    
<% end %>

<br>

路线:

Rails.application.routes.draw do

  mount RailsAdmin::Engine => '/admin', as: 'rails_admin'
  resources :categories

  devise_for :users
  resources :listings do
    resources :orders, only: [:new, :create]



  end
  get 'pages/about'
  get 'pages/contact'
  get 'seller' => "listings#seller"
  get 'sales' => "orders#sales"
  get 'purchases' => "orders#purchases"

  root 'listings#index'


end

控制器

class ListingsController < ApplicationController
  before_action :set_listing, only: [:show, :edit, :update, :destroy]
  before_filter :authenticate_user!, only: [:seller, :new, :create, :edit, :update, :destroy]
  before_filter :check_user, only: [:edit, :update, :destroy]

  def seller
    @listings = Listing.where(user: current_user).order("created_at DESC")
  end

  # GET /listings
  # GET /listings.json
  def index
    if params[:category].blank?
      @listings = Listing.all.order("created_at DESC").paginate(:page => params[:page], :per_page => 16)
    else
      @category_id = Category.find_by(name: params[:category]).id
      @listings = Listing.where(category_id: @category_id).order("created_at DESC").paginate(:page => params[:page], :per_page => 16)
    end
  end

  # GET /listings/1
  # GET /listings/1.json
  def show
  end

  # GET /listings/new
  def new
    @listing = Listing.new
  end

  # GET /listings/1/edit
  def edit
  end

  # POST /listings
  # POST /listings.json
  def create
    @listing = Listing.new(listing_params)
    @listing.user_id = current_user.id

    if current_user.recipient.blank?
      Stripe.api_key = ENV["STRIPE_API_KEY"]
      token = params[:stripeToken]

      recipient = Stripe::Recipient.create(
        :name => current_user.name,
        :type => "individual",
        :bank_account => token
        )


    current_user.recipient = recipient.id
    current_user.save

end

    respond_to do |format|
      if @listing.save
        format.html { redirect_to @listing, notice: 'Listing was successfully created.' }
        format.json { render :show, status: :created, location: @listing }
      else
        format.html { render :new }
        format.json { render json: @listing.errors, status: :unprocessable_entity }
      end
    end
  end

  # PATCH/PUT /listings/1
  # PATCH/PUT /listings/1.json
  def update
    respond_to do |format|
      if @listing.update(listing_params)
        format.html { redirect_to @listing, notice: 'Listing was successfully updated.' }
        format.json { render :show, status: :ok, location: @listing }
      else
        format.html { render :edit }
        format.json { render json: @listing.errors, status: :unprocessable_entity }
      end
    end
  end

  # DELETE /listings/1
  # DELETE /listings/1.json
  def destroy
    @listing.destroy
    respond_to do |format|
      format.html { redirect_to listings_url, notice: 'Listing was successfully destroyed.' }
      format.json { head :no_content }
    end
  end

  private
    # Use callbacks to share common setup or constraints between actions.
    def set_listing
      @listing = Listing.find(params[:id])
    end

    # Never trust parameters from the scary internet, only allow the white list through.
    def listing_params
      params.require(:listing).permit(:name, :category_id, :description, :price, :image)
    end

    def check_user
      if current_user != @listing.user
        redirect_to root_url, alert: "Sorry, this listing belongs to someone else"
      end
    end  
end

模型

class Listing < ActiveRecord::Base
  if Rails.env.development?
        has_attached_file :image, :styles => { :medium => "200x", :thumb => "100x100>" }, :default_url => "404.jpg"
  else
        has_attached_file :image, :styles => { :medium => "200x", :thumb => "100x100>" }, :default_url => "404.jpg",
                    :storage => :dropbox,
                    :dropbox_credentials => Rails.root.join("config/dropbox.yml"),
                    :path => ":style/:id_:filename"
   end              
  validates_attachment_content_type :image, :content_type => /\Aimage\/.*\Z/

  validates :name, :category_id, :description, :price, presence: true
  validates :price, numericality: { greater_than: 0}
  validates_attachment_presence :image

  belongs_to :user
  belongs_to :category
  has_many :orders




end

1 个答案:

答案 0 :(得分:1)

我会遵循this stackoverflow answer中的建议,该建议说明了如何创建设计用户个人资料页面。

通过这种方式,你不会使用不属于它的东西膨胀你的列表控制器,它会更优雅。