仅在用户登录后如何使AJAX工作？ -轨道

Question

I have an app that the user can only click on a photo and save them if he is logged in, however he is still able to click on it and save them when logged out because the show page is similar.

If he is logged out though, the alert "picture was saved" still pops up.

Any ideas?

Answer 1

You should have a conditional statement in the button or link that states only if the user is logged in is he or she allowed to save something. I don't have any code to use so I'll make up an example

<img>
  <%if user_logged_in%>
    <%= link_to "Save Picture", profile_picture_path(@profile)%>
  <% end %>
</img>

*Note: The user_logged_in is not a default helper method, I used it to better explain the example. You would need to write that method using sessions.

The problem is not in your AJAX call judging from your question, that seems to do exactly what your telling it to. It's actually the fact that you aren't preventing the non-logged in user saving a picture.

With that being said, how is a user saving a picture if they aren't logged in? Where and how is that picture being stored. Please upload some code next time.