未允许的参数嵌套属性 - rails

时间:2017-04-26 23:45:22

标签: ruby-on-rails nested-attributes

我正在尝试将表单提交到2个表,但不知何故,我在滑坡参数的这一行unexpected '\n'joins: ['sources'], :landslide_id处出现了这个语法错误found unpermitted parameter: sources。这是所有文件

模型

class Landslide < ApplicationRecord
  has_many :sources, dependent: :destroy
  accepts_nested_attributes_for :sources

class Source < ApplicationRecord
  belongs_to :landslide
end

landslides_controller.rb

  def new
    @landslide = Landslide.new
    @landslide.sources.build
  end

  # POST /landslides
  def create
    @landslide = Landslide.new(landslide_params)

    @landslide.save
  end

  private
    # Use callbacks to share common setup or constraints between actions.
    def set_landslide
      render json: Landslide.find(params[:total_id]),
             joins: ['sources'], :landslide_id
    end

    # Only allow a trusted parameter "white list" through.
    def landslide_params
      params.require(:landslide).permit(:start_date, :continent, :country, :location, :landslide_type, :lat, :lng, :mapped, :trigger, :spatial_area, :fatalities, :injuries, :notes, sources_attributes: [ :url, :text ])
    end

sources_controller.rb

    def set_source
      @source = Source.find(params[:id])
    end

    # Only allow a trusted parameter "white list" through.
    def source_params
      params.require(:source).permit(:url, :text)
    end

_form.html.haml

= form_for :landslide, :url => {:controller => 'landslides', :action => 'create'} do |f|
#something
       %fieldset
        %legend Source
        = f.fields_for :sources do |s|
          .form-group.row
            %label.col-sm-2.col-form-label{for: "textinput"}URL
            .col-sm-10
              = s.text_field :url, class: "form-control"
          .form-group.row
            %label.col-sm-2.col-form-label{for: "textinput"}Text
            .col-sm-10
              = s.text_field :text, class: "form-control"

请求

    {"utf8"=>"✓",
 "authenticity_token"=>"W3m2dLTGyuPCbP6+pStWDfgpIbPzGdl4tvf01vMAbyozzkimqlXH4B/RtwBcsLb+iiBqms7EHagY+Anbpo4zNg==",
 "landslide"=>
  {"start_date(3i)"=>"27",
   "start_date(2i)"=>"4",
   "start_date(1i)"=>"2017",
   "continent"=>"Africa",
   "country"=>"Country",
   "location"=>"Location",
   "landslide_type"=>"1",
   "lat"=>"1",
   "lng"=>"1",
   "mapped"=>"False",
   "spatial_area"=>"1",
   "fatalities"=>"1",
   "injuries"=>"1",
   "notes"=>"1",
   "trigger"=>"1",
   "sources"=>{"url"=>"url", "text"=>"text"}},
 "button"=>""}

Error screenshot

1 个答案:

答案 0 :(得分:0)

发现未经许可的参数:来源

根据您的表单,看起来源代码位于名为sources而不是sources_attributes的param中。修改您的landslide_params,将sources_attributes更改为来源。

我可以问set_landslide试图呈现什么,或者如果我错在下面,请纠正我?将joins放在新行上会导致错误。我在想你正在尝试做类似的事情:

landslide = Landslide.find(params[:total_id])
render json: landslide.to_json(:include => { :sources => { landslide_params[:sources] }})

这会给你一个json与滑坡对象和一个源数组。滑坡id应位于滑坡物体内。这当然假定你想要的是什么。