是否可以在模型中使用cancan？

我有一个带状态机的模型，我想限制不同用户的不同状态/事件/转换。

如何在此模型中访问当前用户和能力？

Answer 1

您可以根据模型提供的任何方法在cancan中定义能力。 状态机转换本身就是模型提供的方法，因此只需设置您的能力就像使用任何其他方法一样。

例如，给出一个简单的模型：

class Order < ActiveRecord::Base state_machine :initial => :new do event :start_processing do transition :new => :processing end event :complete_order do transition :processing => :complete end event :escalate_order do transition :processing => :escalated end event :complete_escalated_order transition :escalated => :complete end state :new state :processing state :escalated state :complete end end 

你可以定义这样的能力：

 class Ability if user.role? :orderer can [:start_processing, :escalate_order, :complete_order], :orders end if user.role? :manager can :complete_escalated_order, :orders end end 

编辑 – 我应该补充一点，然后您将在控制器中使用这些function来处理用户请求：

 class OrdersController < ApplicationController def complete @order = Order.find_by_ref(params[:id]) if @order.can_complete_order? authorize! :complete_order, @order @order.complete_order elsif @order.can_complete_escalated_order? authorize! :complete_escalated_order, @order @order.complete_escalated_order else redirect_to root_url, :notice => "Order cannot be completed" end redirect_to my_queue_path, :notice => "Order #{@order.ref} has been marked as complete." 

结束