Question

Vanilla authlogic/cantango setup, test with ahardcoded roles_list 测试期间<回归代码>[:用户]。测试许可。 yml file:

roles:
  user:
    can:
      manage:
      - User

根据第一项要求,<代码>用户_can? (:manage,user)我期望什么。然而,在随后的要求下,它不再属实,我的许可也随之消失。

~~The current_user and current_user_session vars change on each request; not sure if that s because I m in dev environment and something s being reloaded, but it sketches me out a little bit.~~ Duh :/

在<代码>Application Controller中实施,以示例。

如果我装上ole子:

pry(main)> u = User.first
=> #<User id: 2, email: "ohai@wtf.com", [...]
pry(main)> a = CanTango::Ability.new u
=> [lots of stuff, available on request]
pry(main)> a.can?(:manage, User.new)
=> true
pry(main)> a.can?(:manage, User.new)
=> true

~~I试图在运河中转道(如果是正当的)。 rb per cantango sdocs [...]>~~

任何背心/倾斜/点/点/源/docs?

Answer 1

如果我改变许可。下面的 y(这些角色在理论上不是用户,而是客人的角色,我从未在我的法典中任何地方提到过这种作用,但却不做任何工作)。

roles:
  user:
    can:
      manage:
      - User
  guest:
    cannot:
      manage:
      - User

我至今仍不得不离开。

I m abandoning cantango for now; while I have significant role-based permissions needs, the amount of trouble this caused isn t worth it, and so far it seems like a more targeted solution using some of the same meta-techniques will be cleaner and easier.

友情链接