是load_and_authorize_resource授权控制器中的每个动作，还是仅授权RESTful的动作? [英] Does load_and_authorize_resource authorize every single action in a controller, or just RESTful ones?

问题描述

TL; DR

基本上，我是否必须在不是7个RESTful默认值之一的控制器操作中手动调用 authorize！，还是 load_and_authorize_resource 仍在为我执行此操作那些非标准的行为?

Basically, do I have to manually call authorize! in controller actions that aren't one of the 7 RESTful defaults, or does load_and_authorize_resource still do that for me in those non-standard actions?

长版:

我通过 rails scaffold 生成了一个控制器，然后添加了一些自定义动作来做一些随机的其他事情.

I generated a controller via rails scaffold and then added several custom actions that do some random other things.

在控制器的顶部，我有 load_and_authorize_resource ，我相信在每个操作中都将其称为 authorize！.

At the top of the controller, I have load_and_authorize_resource, which I believe will call authorize! in each of the actions.

它是针对控制器中的每个单个操作(包括自定义操作)还是仅由脚手架生成的 操作执行此操作?(即 index ， show ， new ， edit ， create ， update ， destroy )

Does it do that for every single action within the controller (including the custom ones), or only those that were generated by the scaffold? (i.e. index, show, new, edit, create, update, destroy)

我从 cancan docs 中看到:

为每个操作设置此操作可能很繁琐，因此提供了 load_and_authorize_resource 方法来自动授权RESTful样式资源控制器中的所有操作.

Setting this for every action can be tedious, therefore the load_and_authorize_resource method is provided to automatically authorize all actions in a RESTful style resource controller.

但是我不确定这只是开发人员添加的7张原图还是其他原图

But I'm not sure if that's just the 7 originals or others the developer adds as well

推荐答案

简单答案是是，它将适用于控制器中的 all 所有动作

Simple answer is yes, it will apply to all actions in the controller

来自可以选择的加拿大文档动作:

默认情况下，这将适用于控制器中的每个动作，即使它不是7个RESTful动作之一.

By default this will apply to every action in the controller even if it is not one of the 7 RESTful actions.

这篇关于是load_and_authorize_resource授权控制器中的每个动作，还是仅授权RESTful的动作?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！