similar to: Recommended way of restricting action permissions?

is it true that Rails depend on cookies? It seems that flash is a part of session, and session uses cookies... so when i disable cookie in Firefox, what was working became ActionController::InvalidAuthenticityToken so is it true that for a RoR app to work, cookies are mandatory? -- Posted via http://www.ruby-forum.com/.

When I try and run rake db:migrate, I get this error: rake aborted! uninitialized constant CreateUsers /Library/Ruby/Gems/1.8/gems/activesupport-2.0.2/lib/active_support/ dependencies.rb:266:in `load_missing_constant'' /Library/Ruby/Gems/1.8/gems/activesupport-2.0.2/lib/active_support/ dependencies.rb:453:in `const_missing''

I've been getting a lot of messages with attachments on this list, but I haven't opened any of the e-mails to see if the attachments were legitimate. I also started getting tons of "MS Security...", "Microsoft", etc. e-mails with attachments which I have not opened either (especially figuring that the "Microsoft" e-mail contains a virus, although our filter

Hi all. I''m getting the following error in my app: undefined method `redirect_to'' for ActionController::Base:Class I''m using Windows 2000, Rails 2.0.2 and resource_controller (from James Golick). My controller: class CommentsController < ApplicationController include ResourceController::Controller belongs_to :post, :article, :photo create do

Hi I''m a big fan of plugins such as Resource Controller http://jamesgolick.com/2007/10/19/introducing-resource_controller-focus-on-what-makes-your-controller-special However, recently decided I don''t want to depend on a plugin for this, and would rather stick closer to the rails core. So does anyone have any cool strategies or ideas for achieving this? Or is there any move to

Hi, I''m really new to rails, so i programmed some stuff and today i read some things about skinny Controllers, fat models. My Controllers are really fat now. So i''m asking myself how can i shrink my controllers and move the code to the models, especially in fact of REST e.g. in focus on error codes? code example: # POST /tasks # POST /tasks.xml def create @authorized

Hey guys, I''m quite new in RoR, so please excuse me when I may ask weird questions. I am working on a database frontend. The layout looks mostly like a has_many bs b has_many cs c has_many ds and so on. Now I want to do some selection. Maybe I want to see all ds belonging to a specific b. I would like to do it like: http://my.host/bs/1/ds When I click around there (add new ds, show a d

Hi, I''m just playing with ActiveResource and I did''nt find anything about the support of (polymorphic) associations. Is there a support at all? Thanks in advance --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to

For edge rails there is a Crud generator. There is also a CRUD controller that is out there from which you can inherit your other controllers (see http://geekonomics.blogspot.com/2006/07/crud-and- shared-controllers.html) This got me thinking about Crud controllers in general. As far as I know, the generator can''t produce crud classes which are nested (i.e.

If it helps anyone developing Rails, apps, or gems, I wrote a shortcut for set_trace_func, so next time you want to just add a line before and after some function you are trying to debug you can have Ruby temporarily output every line, method, etc. executed. Also, it lets you define the format, use other loggers, etc. via a proc/lambda define, since you might not like the default format.

I''ve just stumbled (literally, while I was trying to fix a glitch I was having after upgrading Aegis...) on the Inherited Resources gem... why did no-one tell me?! ;-) Is everyone else using some form of controller base-class? Am I the last on this bus! https://github.com/josevalim/inherited_resources -- You received this message because you are subscribed to the Google Groups

Hi, I''m getting an error I just can''t find any cause for. The error is "A copy of ApplicationHelper has been removed from the module tree but is still active!" and gets thrown in a Template that uses a method defined in my ApplicationHelper. The error occurs only in development mode. The error did not occur before my switch to Ruby 1.8.7 and Rails 2.1.2 minutes ago. I

I just discovered James Golick''s resource_controller plugin http://jamesgolick.com/resource_controller after spending another stretch of boredom making the changes to nest yet another rails resource controller. I''d actually slowed down this time to think about what I was doing in hopes of automating the task. I''ve tended to use script/generate rspec_scaffold to get

Hi, When I upgraded my rails application to rails 2.3.2 I am getting error ''can''t modify frozen hash'' on using @something.update_attribute(params[:something]). Can anyone help me who is familiarize with this bug? Thanks,

I''m using fastercsv such that in my rake file I''m doing this. require ''fastercsv'' It works fine on my Mac. I need to freeze this gem into the app though so my rake tasks work on the production machine. ----------- I spent about two hours though this weekend trying to get this Gem "frozen" into the vendor/gems folder. I tried all sorts, I ... -

hehe.. This is OT too but I'm just wondering... "intelligent auto responder" Can you name me a few??? I'm curious.. Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168 -----Original Message----- From: Jason Balicki [mailto:kodak@frontierhomemortgage.com] Sent: Tuesday, September 30, 2003 5:45 AM To: 'Darrik Spaude' Cc:

Can you restric before_filter to specific actions? -- Posted via http://www.ruby-forum.com/.

Posted on stackoverflow but no traction yet: http://stackoverflow.com/questions/12942505/why-does-using-set-trace-func-work-in-some-places-but-cause-unexpected-return-l The following is a generified part of the code in a gem I''m working on: module SomeModule class << self attr_accessor :procedure def log_events(*args) args.flatten!

I have created a ''admin'' controller and all the necessary definitions and templates to delete, update and edit records and this is working OK, but how do I effectively restrict access to these defs'' from all but the admin user (called admin)? Currently I am just using if statements within the defs'' to check if it is the admin user logged in e.g; def index

Hi Guys, Does anyone know how to restrict access on files that you upload in file column to certain users only? I notice that files being saved by the file_column by default are being saved under the public folder and can be accessed just by typing the URL directly. Let''s say you have a Login system where you restrict access to some pages and allow those users to upload their own