filter_attr - 源码 - 源码 - 免费下载

filter_attr

文件大小： unknow

源码售价： 5 个金币积分规则积分充值

资源说明：A rails plugin to help with model attributes mass assignment and parameter filtering in controllers.

h1. filter_attr Rails Plugin

Provides tools to securely manage mass assignment in Rails models.

h2. Usage:

* Working with models:


  # everything inside the block will honor attr_accessible
  User.with_attr_accessible(:name, :email) do
    u = User.new(:name => 'John', :email => 'johny@johnyland.com', :password => 'mypass')
    # password was not initialized
    puts "Password assignment protected?: #{u.password.nil?}"
  end

  # outside the block, attr_accessible is no longer used

  u = User.new(:name => 'John', :email => 'johny@johnyland.com', :password => 'mypass')
  # password was initialized
  puts "Password assignment protected?: #{u.password.nil?}"


This will set @name@ and @email@ as the only accessible attributes of the class User, for the duration of the block.

* Working in controllers

In the body of your controller


  filter_params :allow => [:preview, {:user => [:email, :name]}, {:project => [:name]}], :only => :update


This will filter parameters for action @update@, leaving only @:preview@, @:user@ and @:project@ keys. If under the @:user@
key of the parameters @Hash@, another @Hash@ is found, its keys will be filtered leaving just @:email@ and @:name@, same thing
will happend with @:project@ key. The structure of the @:allow@ parameter, is similar to the :include key in ActiveRecord::Base.find.

You could get a similar effect, but filtering inside the action, doing:


  def update
    filter_parameters_map(params, [:preview, {:user => [:email, :name]}, {:project => [:name]}])
    ...
  end


Copyright (c) 2008 Sebastián Galkin, released under the MIT license

部分文件列表（点击文件名可查看文件内容）

					
									本源码包内暂不包含可直接显示的源代码文件，请下载源码包。