如何处理项目的权限，显示未经授权的页面来请求访问？

发布于 2024-11-07 10:51:17 字数 435 浏览 1 评论 0原文

在我的应用程序中，我有具有权限的项目。如果用户拥有某个项目的权限记录，他们就可以查看该项目。如果没有，CanCan 将它们重定向到根目录。

我想做的是，如果用户尝试查看他们不是成员的项目（/project/100），请向他们显示一个允许他们请求加入的页面。

在 CanCan 中，我有以下内容：

if projectid_viewing && current_user.try(:role, projectid_viewing) == 'Member'
    can [:read, :members], Project
  ....

此 CanCan 功能非常适合允许成员查看项目，但非成员会被踢到根目录。有什么好方法来处理这个问题，这样如果非成员尝试查看该项目，他们就会被带到该项目的“请求加入”页面？

有想法吗？谢谢

原文

in my app I have projects which have permissions. If the user has a permission record for a project they can view the project. If not, CanCan redirects them to the root.

What I would like to do is if a user tries to view a project (/project/100) where they are not a member, show them a page that allows them to request to join.

In CanCan, I have the following:

if projectid_viewing && current_user.try(:role, projectid_viewing) == 'Member'
    can [:read, :members], Project
  ....

This CanCan ability works great for allowing members to view the project, but non members are kicked to the root. what's a good way to handle this so if a non-member tries to view the project they are taken to a Request to Join page for that project?

Ideas? Thanks

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

山有枢 2024-11-14 10:51:17

假设您在控制器中使用load_and_authorize_resource，当用户未经授权时，cancan 会抛出异常，您可以捕获它并定义行为。

class ApplicationController < ActionController::Base
  rescue_from CanCan::AccessDenied do |exception|
    redirect_to request_join_page if current_user.member?
  end
end

您还可以手动检查控制器中的权限，而不是使用 load_and_authorize_resource 您可以在控制器中运行 can?，然后在必要时执行重定向。

Assuming you're usingload_and_authorize_resource in your controller, cancan will throw an exception when a user is not authorized, you can catch it and define the behavior.

class ApplicationController < ActionController::Base
  rescue_from CanCan::AccessDenied do |exception|
    redirect_to request_join_page if current_user.member?
  end
end

You could also manually check permissions in the controller instead of using load_and_authorize_resource you could run can? in the controller and then perform the redirect if necessary.

回复收藏 0 原文

~没有更多了~