authorize_resource :class => false does not work

[dlbock]

I have the following configuation:

The only way I got it to work was to specifically call authorize! :index, :jobs, authorize! :trigger :jobs, etc on each action.

[graywh]

According to the wiki page https://github.com/ryanb/cancan/wiki/Non-RESTful-Controllers, cancan will check permissions on :job, not :jobs. Try using the singular forms in your ability class.

[dlbock]

That did it! Thanks @graywh!

[dlbock]

Actually @graywh, another clarification if you would indulge me (the wiki page isn't entirely clear). If the controller name is also in the singular format say BackgroundDeployController for example, would specifying in the singular in ability.rb mess things up as well? I can test this out, but thought if you can give me some quick insight that would be helpful. Thanks!

[graywh]

The rails convention is to use the plural form for controller names, regardless of the resource being plural or singular.

[dlbock]

Yes, I understand the rails convention. This is an app that I inherited
from someone who wasn't familiar with rails, and I've been trying to
implement authorization without having to make large, over-hauling changes.

On Thu, Sep 26, 2013 at 11:59 AM, Will Gray notifications@github.comwrote:

The rails convention is to use the plural form for controller names,
regardless of the resource being plural or singular.

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/944#issuecomment-25179848
.

Dahlia Bock | +1718.640.0083 |
http://www.dahliabock.com/bloghttp://dahliabock.com/blog

[1v]

If you have class: false you can check controller name like that:

'BackgroundDeploy'.underscore.split('/').last.singularize.to_sym

Or just pass symbol:

load_and_authorize_resource class: :background_deploy

Or watch what can be passed:

cancan/lib/cancan/controller_resource.rb

Lines 144 to 151 in 4560928

	def resource_class
	case @options[:class]
	when false then name.to_sym
	when nil then namespaced_name.to_s.camelize.constantize
	when String then @options[:class].constantize
	else @options[:class]
	end
	end

Not documented at all.