PROSAGA码农传奇-策略引擎-使用Pundit授权时获取布尔值而不是记录

使用Pundit授权时获取布尔值而不是记录

作者: نسر الصحراء
发布时间: 2024-12-17 04:56:06 (21天前)
转自：

<div class =“post-text”itemprop =“text”>
  <P>
    返回记录显然是主人的变化，没有反映在
    <a href="https://github.com/elabs/pundit/blob/b0bdfbc0db601ea4cc6cfcb243a657396c3e0f82/lib/pundit.rb" rel="nofollow noreferrer">
      1.1
    </A>
     发布。
  </p>
   <pre>
    <code>
      # Retrieves the policy for the given record, initializing it with the
# record and user and finally throwing an error if the user is not
# authorized to perform the given action.
#
# @param user [Object] the user that initiated the action
# @param record [Object] the object we're checking permissions of
# @param record [Symbol] the query method to check on the policy (e.g. `:show?`)
# @raise [NotAuthorizedError] if the given query method returned false
# @return [true] Always returns true
def authorize(user, record, query)
  policy = policy!(user, record)

unless policy.public_send(query)
    raise NotAuthorizedError, query: query, record: record, policy: policy
  end

true
end

</code>
  </pre>
  <P>
    解决方法是：
  </p>
   <pre>
    <code>
      def authorize(record, query = nil)
  super
  record 
end

</code>
  </pre>
</DIV>