我正在学习Rails教程第10章中的练习,但在练习中遇到了一个问题,这让我确保管理员用户不能删除自己。我最初的想法是简单地检查当前用户的id,并将其与params[:id]进行比较,以确保它们不相等。我在用户控制器中的销毁操作如下:
def destroy
if current_user.id == params[:id].to_i
flash[:notice] = "You cannot delete yourself."
else
User.find(params[:id]).destroy
flash[:success] = "User destroyed."
end
redirect_to users_path
end
当我在应用程序中手动测试它时,这非常有效,但我的3个RSpec测试失败,出现了相同的"未定义方法'to_I'"错误(如下所示):
1) UsersController DELETE 'destroy' as an admin user should destory the user
Failure/Error: delete :destroy, :id => @user
NoMethodError:
undefined method `to_i' for #<User:0x000001032de188>
# ./app/controllers/users_controller.rb:48:in `destroy'
# ./spec/controllers/users_controller_spec.rb:310:in `block (5 levels) in <top (required)>'
# ./spec/controllers/users_controller_spec.rb:309:in `block (4 levels) in <top (required)>'
2) UsersController DELETE 'destroy' as an admin user should redirect to the users page
Failure/Error: delete :destroy, :id => @user
NoMethodError:
undefined method `to_i' for #<User:0x000001032b5850>
# ./app/controllers/users_controller.rb:48:in `destroy'
# ./spec/controllers/users_controller_spec.rb:315:in `block (4 levels) in <top (required)>'
3) UsersController DELETE 'destroy' as an admin user should not allow you to destroy self
Failure/Error: delete :destroy, :id => @admin
NoMethodError:
undefined method `to_i' for #<User:0x0000010327e350>
# ./app/controllers/users_controller.rb:48:in `destroy'
# ./spec/controllers/users_controller_spec.rb:321:in `block (5 levels) in <top (required)>'
# ./spec/controllers/users_controller_spec.rb:320:in `block (4 levels) in <top (required)>'
如果我使用params[:id]来查找用户,并将其与下面的current_user进行比较,那么它在应用程序和RSpec中都有效。
def destroy
if current_user == User.find(params[:id])
flash[:notice] = "You cannot delete yourself."
else
User.find(params[:id]).destroy
flash[:success] = "User destroyed."
end
redirect_to users_path
end
为什么RSpec中使用"to_i"方法会出现问题?如果有人想知道我倾向于这种方法,因为我认为最好简单地将当前用户id与要删除的用户的id进行比较(通过params[:id]),而不是点击数据库来"找到"用户。
作为参考,这是我的RSpec测试:
describe "DELETE 'destroy'" do
before(:each) do
@user = Factory(:user)
end
...
describe "as an admin user" do
before(:each) do
@admin = Factory(:user, :email => "admin@example.com", :admin => true)
test_sign_in(@admin)
end
it "should destory the user" do
lambda do
delete :destroy, :id => @user
end.should change(User, :count).by(-1)
end
it "should redirect to the users page" do
delete :destroy, :id => @user
response.should redirect_to(users_path)
end
it "should not allow you to destroy self" do
lambda do
delete :destroy, :id => @admin
end.should change(User, :count).by(0)
response.should redirect_to(users_path)
flash[:notice].should =~ /cannot delete yourself/
end
end
end
任何帮助都将不胜感激!
在您的规范中,尝试在:id
参数上使用@user.id
而不是@user
(我意识到教程中说只使用@user
,但可能发生了一些没有正确提取id的情况):
delete :destroy, :id => @user.id
但你可以考虑重组为这样的东西:
@user = User.find(params[:id])
if current_user == @user
flash[:notice] = "You cannot delete yourself."
else
@user.destroy
flash[:success] = "User destroyed."
end