blocks|key|1570126|text|试一试|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1570127|can+:manage,+Article,+:collaborations+=>+{:user_id+=>+user.id}|code-block|syntax|javascript|1570128|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

try

<pre><code>can :manage, Article, :collaborations =&gt; {:user_id =&gt; user.id}
</code></pre>

blocks|key|1017638|text|以下是您能力类中可能对您有用的逻辑：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1017639|class+Ability
++include+CanCan::Ability

++def+initialize(user)
++++user+%7C%7C=+User.new+#+guest+user
++++case
++++when+user.admin?
++++++can+:manage,+:all
++++when+user.registered?
++++++can+:read,+Article
++++++can+:manage,+Article,+:collaborations+=>+{+:user_id+=>+user.id+}
++++else+#+user.guest?
++++++can+:read,+Article
++++end
++end
end|code-block|syntax|javascript|1017640|CanCan允许您指定关联的条件；在这里，我们传递Article上的:collaborations关联的:user_id条件。|offset|length|style|CODE|1017641|添加到用户的其他方法：|1017642|class+User+<+ActiveRecord::Base

++ROLES+=+[
++++ADMIN+=+'admin'
++]

++def+admin?
++++role+==+ADMIN
++end

++def+registered?
++++persisted?
++end

end|1017643|为了确保这是正确的，下面是如何使用RSpec、FactoryGirl和CanCan+matchers编写测试：|1017644|require+'spec_helper'
require+"cancan/matchers"

describe+Ability+do
++subject+{+Ability.new(user)+}

++context+"admin"+do
++++let(:user)+{+create(:admin)+}

++++it+{+should+be_able_to(:manage,+:all)+}
++end

++context+"user"+do
++++let(:user)+{+create(:user)+}

++++it+{+should+be_able_to(:read,+Article)+}

++++it+"cannot+manage+articles+without+collaborations"+do
++++++article+=+create(:article)
++++++should_not+be_able_to(:manage,+article)
++++end

++++it+"cannot+manage+articles+only+others+collaborated+on"+do
++++++article+=+create(:article)
++++++article.collaborations.create+{+%7Cc%7C+c.user+=+create(:user)+}
++++++should_not+be_able_to(:manage,+article)
++++end

++++it+"can+manage+article+with+collobaration"+do
++++++article+=+create(:article)
++++++article.collaborations.create+{+%7Cc%7C+c.user+=+user+}
++++++should+be_able_to(:manage,+article)
++++end
++end

++context+"guest"+do
++++let(:user)+{+User.new+}

++++it+{+should+be_able_to(:read,+Article)+}
++++it+{+should_not+be_able_to(:manage,+Article)+}
++end
end|1017645|entityMap^0|0|0|P|7|Y|F|1G|8|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|X|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Y|8|@$I|Z|J|10|K|L]|$I|11|J|12|K|L]|$I|13|J|14|K|L]]|9|@]|A|$]]|$1|M|3|N|5|6|7|15|8|@]|9|@]|A|$]]|$1|O|3|P|5|D|7|16|8|@]|9|@]|A|$E|F]]|$1|Q|3|R|5|6|7|17|8|@]|9|@]|A|$]]|$1|S|3|T|5|D|7|18|8|@]|9|@]|A|$E|F]]|$1|U|3|-4|5|6|7|19|8|@]|9|@]|A|$]]]|V|$]]

Here's logic in your Ability class that may work for you:

<pre><code>class Ability
 include CanCan::Ability

 def initialize(user)
 user ||= User.new # guest user
 case
 when user.admin?
 can :manage, :all
 when user.registered?
 can :read, Article
 can :manage, Article, :collaborations =&gt; { :user_id =&gt; user.id }
 else # user.guest?
 can :read, Article
 end
 end
end
</code></pre>

CanCan allows you to specify the conditions for associations; here, we pass the <code>:user_id</code> conditions for the <code>:collaborations</code> association on <code>Article</code>. 

Additional methods added to user:

<pre><code>class User &lt; ActiveRecord::Base

 ROLES = [
 ADMIN = 'admin'
 ]

 def admin?
 role == ADMIN
 end

 def registered?
 persisted?
 end

end
</code></pre>

To be sure this is working correctly, here's how you might write the tests with RSpec, FactoryGirl and CanCan matchers:

<pre><code>require 'spec_helper'
require "cancan/matchers"

describe Ability do
 subject { Ability.new(user) }

 context "admin" do
 let(:user) { create(:admin) }

 it { should be_able_to(:manage, :all) }
 end

 context "user" do
 let(:user) { create(:user) }

 it { should be_able_to(:read, Article) }

 it "cannot manage articles without collaborations" do
 article = create(:article)
 should_not be_able_to(:manage, article)
 end

 it "cannot manage articles only others collaborated on" do
 article = create(:article)
 article.collaborations.create { |c| c.user = create(:user) }
 should_not be_able_to(:manage, article)
 end

 it "can manage article with collobaration" do
 article = create(:article)
 article.collaborations.create { |c| c.user = user }
 should be_able_to(:manage, article)
 end
 end

 context "guest" do
 let(:user) { User.new }

 it { should be_able_to(:read, Article) }
 it { should_not be_able_to(:manage, Article) }
 end
end
</code></pre>

blocks|key|1570182|text|您可以在ability.rb文件中尝试这样的操作，.Just定义用户表中的角色，并在模型文件中使用|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1570183|角色、“行政”、“客人”、“其他”|blockquote|1570184|if+user.role+==+"Admin"
++++++if+user.role+==+"admin"
++++++++++++can+:manage,+:all
++++++else
+++++++++++can+:read,+Article
++++++end
end|code-block|syntax|javascript|1570185|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|M|8|@]|9|@]|A|$]]|$1|E|3|F|5|G|7|N|8|@]|9|@]|A|$H|I]]|$1|J|3|-4|5|6|7|O|8|@]|9|@]|A|$]]]|K|$]]

You can try something like this in your ability.rb file .Just define the role in your users table and use is as enum in your model file like 

<blockquote>
 :role, ["Admin", "Guest", "Other"]
</blockquote>

<pre><code>if user.role == "Admin"
 if user.role == "admin"
 can :manage, :all
 else
 can :read, Article
 end
end
</code></pre>

blocks|key|2046798|text|尝试使用以下方法。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2046799|初始化(用户)|2046800|user+%7C%7C=+User.new
if+user.admin?
++++can+:manage+:all
elsif+user.registered?
++++can+:manage,+Article,+:collaborations=>{:user_id=>user.id}
++++can+:read,++Article
else
++++can+:read,++Article
end|code-block|syntax|javascript|2046801|结束|2046802|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|N|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|O|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Try with the following method.

def initialize(user)

<pre><code>user ||= User.new
if user.admin?
 can :manage :all
elsif user.registered?
 can :manage, Article, :collaborations=&gt;{:user_id=&gt;user.id}
 can :read, Article
else
 can :read, Article
end
</code></pre>

end

blocks|key|1570305|text|这是一个由CanCan作者提供的视频指南，它可能会清除gem的正确用法。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1570306|http://railscasts.com/episodes/192-authorization-with-cancan|offset|length|1570307|不要忘记在设置所有权限以授权当前用户在控制器中执行的操作之后。有关github的更多文档。|1570308|大约一年前我使用了CanCan，使用命令load_and_authorize_resource很容易设置它|style|CODE|1570309|Class+ArticlesController+>+ApplicationController
++load_and_authorize_resource+#authorize+all+actions+based+on+ability.rb

++def+index
++++##+manual+authorization+##
++++@articles+=+Article.all
++++authorize!+:read,+@articles+#Manually+authorize+this+action.+You+dont+need+this+if+you+put+load_and_authorize_resource+on+top.+
++++##+end+manual+authorization+##
++end

++def+show+
++++#@article+=+Article.find(params[:id])+#already+loaded+and+authorized+through+load_and_authorize_resource
++end

end|code-block|syntax|javascript|1570310|喝杯咖啡吧。|1570311|entityMap|0|LINK|mutability|MUTABLE|url|1|https://github.com/ryanb/cancan^0|0|0|1O|0|0|X|6|1|0|K|R|0|0|0^^$0|@$1|2|3|4|5|6|7|11|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|12|8|@]|9|@$D|13|E|14|1|15]]|A|$]]|$1|F|3|G|5|6|7|16|8|@]|9|@$D|17|E|18|1|19]]|A|$]]|$1|H|3|I|5|6|7|1A|8|@$D|1B|E|1C|J|K]]|9|@]|A|$]]|$1|L|3|M|5|N|7|1D|8|@]|9|@]|A|$O|P]]|$1|Q|3|R|5|6|7|1E|8|@]|9|@]|A|$]]|$1|S|3|-4|5|6|7|1F|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|C]]|Z|$5|V|W|X|A|$Y|10]]]]

Here is a video guide by the author of CanCan that might clearify the correct usage of the gem.

<a href="http://railscasts.com/episodes/192-authorization-with-cancan" rel="nofollow">http://railscasts.com/episodes/192-authorization-with-cancan</a>

Dont forget to after setting all the permissions to authorize actions done by the current user in your controller. More documentation on <a href="https://github.com/ryanb/cancan" rel="nofollow">github</a>.

I used CanCan about a year ago and the it was easily set with the command <code>load_and_authorize_resource</code>

<pre><code>Class ArticlesController &gt; ApplicationController
 load_and_authorize_resource #authorize all actions based on ability.rb

 def index
 ## manual authorization ##
 @articles = Article.all
 authorize! :read, @articles #Manually authorize this action. You dont need this if you put load_and_authorize_resource on top. 
 ## end manual authorization ##
 end

 def show 
 #@article = Article.find(params[:id]) #already loaded and authorized through load_and_authorize_resource
 end

end
</code></pre>

Enjoy the coffee.

I have a Ruby on Rails app with <code>users</code>, <code>articles</code> and <code>collaborations</code>. Here are the relationships:

<pre><code>User has_many :articles
User has_many :collaborations

Article belongs_to :users
Article has_many :collaborations

# Collaboration has collaboration.id collaboration.user_id and collaboration.article_id.
Collaboration belongs_to :users
Collaboration belongs_to :articles
</code></pre>

I am successfully able to access both users and articles by going through collaborations so I think everything is set up in my app correctly. Ok on the to question. 

I'm using <a href="https://github.com/ryanb/cancan" rel="nofollow">CanCan</a> with an role of <code>:admin</code>. Basically I only want <code>:admin</code> to be able to create posts and collaborations and I have that working correctly as well. The question is...how do I write that role into my <code>ability.rb</code> file such that users who are NOT admin can still collaborate on articles where they are part of a collaboration?"

<ol>
<li>User A (who is an admin) creates an Article X</li>
<li>User A creates a collaboration on Article X with User B</li>
<li>User B logs in but is only able to edit &amp; update Article X</li>
</ol>

How should I write that in <code>ability.rb</code>. It's like I want to say the following: "Users who aren't admins can manage Articles where they are part of a collaboration for that article."

Sorry for being verbose, haven't had my coffee yet :). Here is my <code>ability.rb</code>. 

<pre><code>class Ability
 include CanCan::Ability

 def initialize(user)
 user ||= User.new # guest user
 if user.role == "admin"
 can :manage, :all
 else
 can :read, Article
 # this is where I want to say: can :manage if part of collaboration for article 
 end
 end
end
</code></pre>

CanCan, Rails, and Collaboration

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我有一个带有users、articles和collaborations的Rails应用程序。下面是几种关系：User has_many :articlesUser has_many :collaborationsArticle belongs_to :usersArticle has_many :collaborati...

问CanCan、Rails和协作
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问CanCan、Rails和协作EN