Rails%203%20In%20Action

Projects can be created only by admins
7.1 Projects can be created only by admins
To restrict the creation of projects to admins, you alter the existing Background in
features/creating_projects.feature and insert the following listing as the first three lines.
Listing 7.1 features/creating_projects.feature
Given there are the following users:
| email | password |
| admin@ticketee.com | password |
And I am signed in as them
This listing creates a user. The Background should now look like the following listing.
Listing 7.2 features/creating_projects.feature
Given there are the following users:
| email | password | admin |
| admin@ticketee.com | password | true |
And I am signed in as them
Given I am on the homepage
When I follow "New Project"
There’s a problem here: the admin attribute for User objects isn’t mass-assignable. You
saw this issue in chapter 6 when the attr_accessible method was introduced. This
restriction means that you can’t assign the admin attribute along with other attributes
using the new, build, create, or update_attributes method.
You have to set this attribute manually by using either update_attribute or the
setter, user.admin = [value]. You use the latter here, so change this step in features/
step_definitions/user_steps.rb
Given /^there are the following users:$/ do |table|
table.hashes.each do |attributes|
unconfirmed = attributes.delete("unconfirmed") == "true"
@user = User.create!(attributes)
@user.confirm! unless unconfirmed
end
end
to this:
Given /^there are the following users:$/ do |table|
table.hashes.each do |attributes|
unconfirmed = attributes.delete("unconfirmed") == "true"
@user = User.create!(attributes)
@user.update_attribute("admin", attributes["admin"] == "true")
@user.confirm! unless unconfirmed
end
end
If you pass the admin attribute in your table, it’ll be a string. You check whether the
string is equal to true, and if it is, you use update_attribute to set the admin field manually
to true or false, depending on whether or not attributes["admin"]is true.
137