使用表单RoR切换管理员用户

Question

I am looking at creating a toggle button for current admins to toggle user admin status on/off. From my understanding I will require some json to perform this but I am very limited in this category and am just a beginner to programming in general. I am using rails v5.0.1 and ruby v2.3.2 Information about how I want this to work:

1. An admin will access the Users Index where he/she will be able to search through all users

2. Each user can be deleted or admin on/off toggled via Administrative actions developed with before_actions (in controllers) and if/else methods (in views)

NOTE: My User table is name:string, email:string, and admin:boolean default:false (for obvious reasons). though it doesn't matter the passwords are pass/passconfirm with a digest.

I have searched everywhere but I either get a routing issue when trying to send a patch request or a simple syntax error because I tried something new

Users Controller

class UsersController < ApplicationController
    include UsersHelper
    before_action :logged_in_user, only: [:edit, :update, :index]
    before_action :correct_user, only: [:edit, :update]
    before_action :admin_user, only: [ :destroy]

    def index
        @users = User.paginate(page: params[:page])
    end

    def show
        @user = User.find(params[:id])
    end

    def new
        @user = User.new
    end

    def create
        @user = User.new(user_params)
        if @user.save
            log_in @user
            flash[:success]= "Welcome #{@user.name}!"
            redirect_to user_path(@user)
        else
            render 'new'
        end
    end

    def edit
        @user = User.find(params[:id])
    end

    def update
        @user = User.find(params[:id])
        if @user.update_attributes(user_params)
            flash[:success]= "#{@user.name} you have successfully updated account information"
            redirect_to user_path(@user)
        else
            render 'edit'
        end
    end

    def destroy
        User.find(params[:id]).destroy
        flash[:success] = "User deleted"
        redirect_to users_url
    end

        private

        def user_params
            params.require(:user).permit(:name, :email, :password, :password_confirmation)
        end

        def logged_in_user
            unless logged_in?
                flash[:danger] = "Please log in."
                redirect_to login_url
            end
        end

        # Confirms the correct user.
        def correct_user
            @user = User.find(params[:id])
            redirect_to(root_url) unless current_user?(@user)
        end

        def admin_user
            redirect_to(root_url) unless current_user.admin?
        end

        def make_admin
            @user = User.find(params[:id])
            @user.toggle!(:admin)
            redirect_to users_path
        end
end

and my users/index.html.erb:

  <h1>Users Index</h1>
<div class="container-fluid">
<div class="col-xs-6">
<%= will_paginate %>
<ul class="users">
  <% @users.each do |user| %>
    <li>
      <%= gravatar_for user, size: 50 %>
      <%= link_to user.name, user %>
      <% if current_user.admin? && !current_user?(user) %> |
      <%= button_to [:make_admin, @user] do %>
      Make <%= @user.name%> an admin?

      <%= link_to "delete", user, method: :delete,
                                  data: { confirm: "Are you sure?" } %> |

    </li>
    <% end %>
    <% end %>
</ul>
<% end %>
<%= will_paginate %>
</div>
</div>

Answer 1

first don't let the method on private because with that, the method isn't accesible directly, that's the first part. just put the method above the private line.

and if you have for example in your routes a resources for user, add this

resources :users do
  match :make_admin, :via => [:get]
end

then let's go with the link

<%= link_to user_make_admin_path(user.id) do %>
  Make <%= user.name%> an admin?
<% end%>