调试康康舞

Question

我正在尝试调试以下块。

  can :create, Todo do |todo|
    todo.user.account == user.account
  end

我在 TodosController 顶部使用 load_and_authorize_resource。

我遇到的问题是，在执行 :create 操作时，上述 todo.user.account 的“account”是一个 nil 方法。似乎待办事项对象在传递时并未完全实例化；我不知道如何控制这一点。

以下是 TodosController 的相关部分：

  def new
    #@todo = Todo.new
    @todo = current_user.todos.build
    respond_to do |format|
      format.html # new.html.erb
      format.json { render :json => @todo }
    end
  end

  def create
    #@todo = Todo.new(params[:todo])

    #Build the @todo object including the relations of who's made this todo.
    @todo = current_user.todos.build(params[:todo])
    @todo.subscriptions.build(:user => current_user, :todo => @todo)
    @todo.subscriptions.build(:user => @todo.assignee, :todo => @todo)
    respond_to do |format|
      if @todo.save
        #format.html { redirect_to @todo, :notice => 'Todo was successfully created.' }
        Notifier.notify_assignee(@todo,current_user).deliver
        format.html { redirect_to :back }
        format.json { render :json => @todo, :status => :created, :location => @todo }
      else
        format.html { render :action => "new" }
        format.json { render :json => @todo.errors, :status => :unprocessable_entity }
      end
    end
  end

Answer 1

load_and_authorize_resource :except => :create

进而：

def create
  #@todo = Todo.new(params[:todo])

  #Build the @todo object including the relations of who's made this todo.
  @todo = current_user.todos.build(params[:todo])
  authorize! :create, @todo