ruby-on-rails – 用户的Rails模型结构

你可以寻找宝石Devise和CanCan.这对真是强大的组合.这使得两个模型User和Role.在角色中,您可以创建新角色,而无需为其创建新模型.虽然它创建了模型能力,但您可以在此处定义角色的访问规则.

手册：
http://www.tonyamoyal.com/2010/07/28/rails-authentication-with-devise-and-cancan-customizing-devise-controllers/

在这里你可以找到Devise和CanCan的来源和wikies：

https://github.com/plataformatec/devise

https://github.com/ryanb/cancan

我的模型看起来像这样：

Role.rb

class Role < ActiveRecord::Base
  has_and_belongs_to_many :users
end

User.rb

class User < ActiveRecord::Base
  has_many :accounts
  has_and_belongs_to_many :roles

  # Include default devise modules. Others available are:
  # :token_authenticatable,:confirmable,:lockable and :timeoutable
  devise :database_authenticatable,:recoverable,:rememberable,:trackable,:validatable

  # Setup accessible (or protected) attributes for your model
  attr_accessible :email,:username,:password,:password_confirmation,:remember_me,:role_ids

  def role?(role)
    return !!self.roles.find_by_name(role.to_s.camelize)
  end

end

Ability.rb

class Ability
  include CanCan::Ability

  def initialize(user)
    user ||= User.new # guest user

    if user.role? :administrator
      can :manage,:all
    elsif user.role? :operator
      can :read,Account
      can :read,Server
    elsif user.role? :customer
      can :manage,Server
    end
  end
end

在控制器中,您必须只添加以下两行：

class YourController < ApplicationController
  before_filter :authenticate_user!
  load_and_authorize_resource

  ...

end