blocks|key|314544|text|再一次，这是阅读手册的问题.|type|unstyled|depth|inlineStyleRanges|entityRanges|data|314545|神奇的单词是:account_update，因此工作版本变成|offset|length|style|CODE|314546|def+configure_permitted_parameters
++devise_parameter_sanitizer.for(:sign_up)+{+%7Cu%7C+u.permit(:email,+:password,+:password_confirmation,+:firstname,+:middlename,+:lastname,+:nickname)+}
++devise_parameter_sanitizer.for(:account_update)+{+%7Cu%7C+u.permit(:email,+:password,+:password_confirmation,+:current_password,+:firstname,+:middlename,+:lastname,+:nickname)+}
end|code-block|syntax|javascript|314547|请注意，如果您正在使用非标准参数进行签名，您要查找的单词是:sign_in+(正如所期望的)。|314548|entityMap^0|0|6|F|0|0|T|8|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@$D|S|E|T|F|G]]|9|@]|A|$]]|$1|H|3|I|5|J|7|U|8|@]|9|@]|A|$K|L]]|$1|M|3|N|5|6|7|V|8|@$D|W|E|X|F|G]]|9|@]|A|$]]|$1|O|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|P|$]]

Once again, it was a matter of reading the manual ...

The magic word is <code>:account_update</code> and thus the working version becomes

<pre><code>def configure_permitted_parameters
 devise_parameter_sanitizer.for(:sign_up) { |u| u.permit(:email, :password, :password_confirmation, :firstname, :middlename, :lastname, :nickname) }
 devise_parameter_sanitizer.for(:account_update) { |u| u.permit(:email, :password, :password_confirmation, :current_password, :firstname, :middlename, :lastname, :nickname) }
end
</code></pre>

Note that if you're in the business of signing in using non-standard parameters, the word you're looking for is <code>:sign_in</code> (as expected).

blocks|key|314554|text|@conciliator关于:account_update这个神奇词是正确的，但是这里是他提到的http://rubydoc.info/github/plataformatec/devise/搜索'devise_parameter_sanitizer‘的文档链接，您将看到以下内容：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|314555|Devise中只有三个操作允许将任意一组参数传递给模型，因此需要清理。默认情况下，它们的名称和允许的参数是：|314556|sign_in+(Devise::SessionsController#new)+-+Permits+only+the+authentication+keys+(like+email)
sign_up+(Devise::RegistrationsController#create)+-+Permits+authentication+keys+plus+password+and+password_confirmation
account_update+(Devise::RegistrationsController#update)+-+Permits+authentication+keys+plus+password,+password_confirmation+and+current_password|code-block|syntax|javascript|314557|entityMap|0|LINK|mutability|MUTABLE|url|http://rubydoc.info/github/plataformatec/devise/^0|1C|1C|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@$A|T|B|U|1|V]]|C|$]]|$1|D|3|E|5|6|7|W|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|X|8|@]|9|@]|C|$I|J]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|C|$]]]|L|$M|$5|N|O|P|C|$Q|R]]]]

@conciliator is correct about the magic word is :account_update but here's the link to the documentation he alluded to <a href="http://rubydoc.info/github/plataformatec/devise/">http://rubydoc.info/github/plataformatec/devise/</a>
Search for 'devise_parameter_sanitizer' and you'll see the following:

There are just three actions in Devise that allows any set of parameters to be passed down to the model, therefore requiring sanitization. Their names and the permitted parameters by default are:

<pre><code>sign_in (Devise::SessionsController#new) - Permits only the authentication keys (like email)
sign_up (Devise::RegistrationsController#create) - Permits authentication keys plus password and password_confirmation
account_update (Devise::RegistrationsController#update) - Permits authentication keys plus password, password_confirmation and current_password
</code></pre>

blocks|key|315724|text|def+configure_permitted_parameters
++devise_parameter_sanitizer.for(:account_update)+{+%7Cu%7C+u.permit(:email,+++:password,+:password_confirmation,+:current_password,+:firstname,+:middlename,+:lastname,+:nickname)+}
end|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|315725|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code>def configure_permitted_parameters
 devise_parameter_sanitizer.for(:account_update) { |u| u.permit(:email, :password, :password_confirmation, :current_password, :firstname, :middlename, :lastname, :nickname) }
end
</code></pre>

blocks|key|631457|text|用于设计4.1%2B|type|unstyled|depth|inlineStyleRanges|entityRanges|data|631458|class+ApplicationController+<+ActionController::Base++++
++before_action+:configure_permitted_parameters,+if:+:devise_controller?

++protected

++def+configure_permitted_parameters
++++devise_parameter_sanitizer.permit(:sign_up,+keys:+[:first_name,+:last_name,+:email])
++++devise_parameter_sanitizer.permit(:account_update,+keys:+[:first_name,+:last_name,+:phone,+:email,+bank_attributes:+[:bank_name,+:bank_account]])
++end
end|code-block|syntax|javascript|631459|不推荐使用.for方法，现在我们使用.permit|offset|length|style|CODE|631460|第一个arg是动作名。:sign_up用于创建新的设计资源(如用户)，:account_update用于编辑/更新资源。|631461|第二个arg，:keys包含一个允许的参数数组。|631462|如果您想要nested_attributes，在:account_update中有一个例子，您可以在其中放置一个单独的数组，键是<object>_attributes。|631463|entityMap^0|0|0|5|4|I|7|0|B|8|Z|F|0|7|5|0|5|H|O|F|1S|J|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|V|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|W|8|@$I|X|J|Y|K|L]|$I|Z|J|10|K|L]]|9|@]|A|$]]|$1|M|3|N|5|6|7|11|8|@$I|12|J|13|K|L]|$I|14|J|15|K|L]]|9|@]|A|$]]|$1|O|3|P|5|6|7|16|8|@$I|17|J|18|K|L]]|9|@]|A|$]]|$1|Q|3|R|5|6|7|19|8|@$I|1A|J|1B|K|L]|$I|1C|J|1D|K|L]|$I|1E|J|1F|K|L]]|9|@]|A|$]]|$1|S|3|-4|5|6|7|1G|8|@]|9|@]|A|$]]]|T|$]]

<h1>For Devise 4.1+</h1>
<pre><code>class ApplicationController &lt; ActionController::Base 
 before_action :configure_permitted_parameters, if: :devise_controller?

 protected

 def configure_permitted_parameters
 devise_parameter_sanitizer.permit(:sign_up, keys: [:first_name, :last_name, :email])
 devise_parameter_sanitizer.permit(:account_update, keys: [:first_name, :last_name, :phone, :email, bank_attributes: [:bank_name, :bank_account]])
 end
end
</code></pre>
The <code>.for</code> method is deprecated, now we use <code>.permit</code>
The first arg is the action name. <code>:sign_up</code> is for creating new Devise resources (such as users), and <code>:account_update</code> is for editing/updating the resource.
The second arg, <code>:keys</code> contains an array of the parameters you allow.
If you want <code>nested_attributes</code>, there is an example in <code>:account_update</code>, you put a separate array in with the key being <code>&lt;object&gt;_attributes</code>.

I've added Devise to my Rails 4 application, and successfully added username etc. to my User model. Furthermore, I'm able to store those fields using the lazy way&trade;, i.e.

<pre><code>class ApplicationController &lt; ActionController::Base
 before_filter :configure_permitted_parameters, if: :devise_controller?

 protected

 def configure_permitted_parameters
 devise_parameter_sanitizer.for(:sign_up) { |u| u.permit(:email, :password, :password_confirmation, :firstname, :middlename, :lastname) } 
 end
end
</code></pre>

However, I tried 

<pre><code>def configure_permitted_parameters
 devise_parameter_sanitizer.for(:sign_up) { |u| u.permit(:email, :password, :password_confirmation, :firstname, :middlename, :lastname) }
 devise_parameter_sanitizer.for(:edit) { |u| u.permit(:email, :password, :password_confirmation, :firstname, :middlename, :lastname) }
end
</code></pre>

but that didn't work quite as expected (username not being stored when invoked by the edit action). Is there something else I need to do in order to get that to work? Thanks!

How to specify devise_parameter_sanitizer for edit action?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我在Rails 4应用程序中添加了Devise，并成功地将用户名等添加到我的用户模型中。此外，我还可以使用延迟方式™来存储这些字段，即class ApplicationController < ActionController::Base before_filter :configure_permitted_para...

问如何为编辑操作指定devise_parameter_sanitizer？
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何为编辑操作指定devise_parameter_sanitizer？EN