How can I use cancan to secure all of my controllers in rails?

Question

有没有一种方法可以在application_controller中添加一些代码，以便Rails可以使用cancan自动保护每个控制器，而不必在每个控制器中添加load_and_authorize_resource ？

Answer 1

Yes, you can use inheritance:

class HomeController < ApplicationController
 # [etc]
end

class SettingsController < ApplicationController
end

class UsersController < SettingsController
end

class ProductsController < SettingsController
end

So you can give access to the SettingsController:

can :manage, SettingsController

Which will give access to all controllers that inherit from SettingsController.