[英]The index is listing everything, cancancan is not filtering
I have this view that lists all pops, only it depends on the user, it should not appear everything, so I was using the cancancan to filter, but it is not working anymore. 我有一个列出所有弹出窗口的视图,仅取决于用户,它不应该显示所有内容,因此我使用了cancancan进行过滤,但是它不再起作用。
my view(pops/index.html.erb): 我的观点(pops / index.html.erb):
<% if @pops.present? %>
<table class="table table-striped">
<thead>
<tr>
<th scope="col">Titulo</th>
<th colspan="4"></th>
</tr>
</thead>
<% @pops.each do |pop| %>
<tbody>
<tr>
<% if can? :index, Pop %>
<td scope="row"><%= pop.title %></td>
<% end %>
<% if can? :show, Pop %>
<td><%= link_to 'Mostrar', pop %></td>
<% end %>
<% if can? :edit, Pop %>
<td><%= link_to 'Editar', edit_pop_path(pop) %></td>
<% end %>
<% if can? :delete, Pop %>
<td><%= link_to 'Excluir', pop, method: :delete %></td>
<% end %>
<% if can? :index_pdf, Pop %>
<td><%= link_to 'Exportar', index_pdf_path(pop) %></td>
<% end %>
</tr>
</tbody>
<% end %>
</table>
<% end %>
my model 我的模特
class Pop < ApplicationRecord
enum charge: {
Auxiliar: 1,
Analista: 2,
Coordenador: 3,
Supervisor: 4,
Gerente: 5,
Diretor: 6
}
enum status: {
active: 0,
inactive: 1
}
has_many :pop_groups
has_many :groups, :through => :pop_groups, :dependent => :destroy
end
my ability 我的能力
class Ability
include CanCan::Ability
def initialize(user)
if user
if user.kind == 'user'
if user.charge == 'Auxiliar'
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Auxiliar', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
end
if user.charge == 'Analista'
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Auxiliar', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Analista', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
end
if user.charge == 'Coordenador'
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Auxiliar', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Analista', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Coordenador'
end
if user.charge == 'Supervisor'
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Auxiliar', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Analista', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Coordenador', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Supervisor', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
end
if user.charge == 'Gerente'
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Auxiliar', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Analista', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Coordenador', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Supervisor', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Gerente', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
end
if user.charge == 'Diretor'
can :index_pdf, Pop, status: 'active'
can :read, Pop, status: 'active'
end
end
end
end
end
I tried in many ways but I could not get him to take what the user could not see. 我尝试了很多方法,但无法让他接受用户看不见的内容。 Does anyone have any ideas?
有人有什么想法吗?
Okay, I managed to make it work. 好吧,我设法使它起作用。 Here is the code.
这是代码。
<% @pops.each do |pop| %>
<tbody>
<% if can? :show, pop %>
<tr>
<td><%= pop.title if can? :show, pop %></td>
<td><%= link_to 'Visualizar', pop if can? :show, pop %></td>
<td><%= link_to 'Editar', edit_pop_path(pop) if can? :edit, pop %></td>
<td><%= link_to 'Excluir', pop, method: :delete if can? :delete, pop %></td>
<td><%= link_to 'Exportar', index_pdf_path(pop) if can? :index_pdf, pop %></td>
</tr>
<% end %>
<%end%>
The first 'if' is that the 'each' does not create blank lines. 第一个“如果”是“每个”都不创建空行。 The others are the tests to see if the user has permission.
其他是查看用户是否具有权限的测试。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.