该索引列出了所有内容,cancancan不会过滤

问题描述 投票:1回答:1

我有这个视图,列出所有的pop,只有它取决于用户,它不应该出现一切,所以我使用cancancan进行过滤,但它不再工作了。

我的观点(pops / index.html.erb):

<% if @pops.present? %>
    <table class="table table-striped">
      <thead>
        <tr>
            <th scope="col">Titulo</th>
            <th colspan="4"></th>
        </tr>
      </thead>
      <% @pops.each do |pop| %>
      <tbody>
        <tr>                      
          <% if can? :index, Pop %> 
              <td scope="row"><%= pop.title  %></td>   
          <% end %>    
          <% if can? :show, Pop %>        
            <td><%= link_to 'Mostrar', pop %></td> 
          <% end %> 
          <% if can? :edit, Pop %>    
            <td><%= link_to 'Editar', edit_pop_path(pop) %></td> 
          <% end %> 
          <% if can? :delete, Pop %>    
            <td><%= link_to 'Excluir', pop, method: :delete %></td>     
          <% end %> 
          <% if can? :index_pdf, Pop %>
            <td><%= link_to 'Exportar', index_pdf_path(pop) %></td>
          <% end %>         
        </tr>
      </tbody>
      <% end %>
    </table>
<% end %>

我的模特

class Pop < ApplicationRecord
  enum charge: {
            Auxiliar: 1,
            Analista: 2,
            Coordenador: 3,
            Supervisor: 4,
            Gerente: 5,
            Diretor: 6
        }
    enum status: {
        active: 0,
        inactive: 1
    }
    has_many :pop_groups
    has_many :groups, :through => :pop_groups, :dependent => :destroy        
end

我的能力

class Ability
    include CanCan::Ability

    def initialize(user)
        if user
            if user.kind == 'user'
                if user.charge == 'Auxiliar'               
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Auxiliar', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq                           
                end 
                if user.charge == 'Analista'
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Auxiliar', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Analista', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
                 end
                if user.charge == 'Coordenador'
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Auxiliar', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Analista', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Coordenador'                     
                 end
                if user.charge == 'Supervisor'
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Auxiliar', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Analista', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Coordenador', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq 
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Supervisor', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq                    
                end 
                if user.charge == 'Gerente'
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Auxiliar', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Analista', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Coordenador', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq 
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Supervisor', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq
                    can [:index_pdf, :show, :read, :view, :index], Pop, status: 'active', charge: 'Gerente', id: PopGroup.where(group_id: user.group_ids).pluck(:pop_id).uniq                   
               end 
                if user.charge == 'Diretor'
                    can :index_pdf, Pop, status: 'active'
                    can :read, Pop, status: 'active'
                end            
            end
        end
    end
end

我试过很多方面,但我无法让他接受用户看不到的东西。有没有人有任何想法?

ruby-on-rails ruby-on-rails-5 cancancan
1个回答
0
投票

好的,我设法让它发挥作用。这是代码。

<% @pops.each do |pop| %>
          <tbody>
            <% if can? :show, pop %>
                <tr>                      
                  <td><%= pop.title if can? :show, pop %></td>                
                    <td><%= link_to 'Visualizar', pop if can? :show, pop %></td>                  
                    <td><%= link_to 'Editar', edit_pop_path(pop) if can? :edit, pop %></td> 
                    <td><%= link_to 'Excluir', pop, method: :delete if can? :delete, pop %></td> 
                    <td><%= link_to 'Exportar', index_pdf_path(pop) if can? :index_pdf, pop %></td>     
                </tr>
            <% end %>
<%end%>

第一个'if'是'each'不会创建空行。其他是用于查看用户是否具有权限的测试。

© www.soinside.com 2019 - 2024. All rights reserved.