【发布时间】:2011-05-28 08:56:56
【问题描述】:
我有一个使用Devise 并启用了registerable 模块的身份验证设置的Rails 3 应用程序。
我想让使用我们的外部注册表单注册的新用户使用完整的 Devise registerable 模块,这正在发生。
但是,我也希望 admin 用户能够直接创建新用户,绕过(我认为)Devise 的 registerable 模块。
禁用
registerable后,我的标准UsersController 可以为admin用户正常工作,就像任何其他Rail 脚手架一样。但是,现在新用户无法自行注册。-
启用
registerable后,我的标准UsersController 永远不会为新用户操作调用(而是调用Devise::RegistrationsController),并且我的CRUD 操作似乎根本不起作用(我被转回到我的根页面没有创建新用户,也没有 Flash 消息)。这是请求中的日志:Started POST "/users" for 127.0.0.1 at 2010-12-20 11:49:31 -0500 Processing by Devise::RegistrationsController#create as HTML Parameters: {"utf8"=>"✓", "authenticity_token"=>"18697r4syNNWHfMTkDCwcDYphjos+68rPFsaYKVjo8Y=", "user"=>{"email"=>"test@test.com", "password"=>"[FILTERED]", "password_confirmation"=>"[FILTERED]", "role"=>"manager"}, "commit"=>"Create User"} SQL (0.9ms) ... User Load (0.6ms) SELECT "users".* FROM "users" WHERE ("users"."id" = 2) LIMIT 1 SQL (0.9ms) ... Redirected to http://test-app.local/ Completed 302 Found in 192ms
...但是我可以通过外部表单注册新用户。
我怎样才能让这两种方法一起工作,以便我的admin 用户可以手动创建新用户和来宾用户可以自己注册?
我为标准 CRUD 设置了用户控制器:
class UsersController < ApplicationController
load_and_authorize_resource
def index
@users = User.where("id NOT IN (?)", current_user.id) # don't display the current user in the users list; go to account management to edit current user details
end
def new
@user = User.new
end
def create
@user = User.new(params[:user])
if @user.save
flash[:notice] = "#{ @user.email } created."
redirect_to users_path
else
render :action => 'new'
end
end
def edit
end
def update
params[:user].delete(:password) if params[:user][:password].blank?
params[:user].delete(:password_confirmation) if params[:user][:password].blank? and params[:user][:password_confirmation].blank?
if @user.update_attributes(params[:user])
flash[:notice] = "Successfully updated User."
redirect_to users_path
else
render :action => 'edit'
end
end
def delete
end
def destroy
redirect_to users_path and return if params[:cancel]
if @user.destroy
flash[:notice] = "#{ @user.email } deleted."
redirect_to users_path
end
end
end
我的路线设置如下:
TestApp::Application.routes.draw do
devise_for :users
devise_scope :user do
get "/login", :to => "devise/sessions#new", :as => :new_user_session
get "/logout", :to => "devise/sessions#destroy", :as => :destroy_user_session
end
resources :users do
get :delete, :on => :member
end
authenticate :user do
root :to => "application#index"
end
root :to => "devise/session#new"
end
【问题讨论】:
标签: ruby-on-rails devise