cancan The can? and cannot? call cannot be used with a raw sql 'can' definition.

The can? and cannot? call cannot be used with a raw sql 'can' definition.

Open meetwudi opened this issue 10 years ago • 9 comments

My shop model and user have many-to-many relationship. Only the user belongs to the shop can manage the shop.

I followed instructions here in order to use scope.

shop.rb

scope :user_owns, ->(user_id) { joins(:shops_users).where(:shops_users => {:user_id => user_id}) }

ability.rb

can :manage, Shop, Shop.user_owns(user.id)

But I got

The can? and cannot? call cannot be used with a raw sql 'can' definition. The checking code cannot be determined for :index Shop(id: integer, name: string, description: string, description_detail: text, created_at: datetime, updated_at: datetime, feature_image_file_name: string, feature_image_content_type: string, feature_image_file_size: integer, feature_image_updated_at: datetime)

Is it a bug? I totally followed the documentation.

Dec 25 '14 12:12 meetwudi

having the same issue...

Jul 23 '15 17:07 evilbikes79

Are you using can? to check? or accessible_by?

Jul 23 '15 17:07 Senjai

I am not using any calls to "Can?"

I have the following code in my Customer.rb model

scope :for_provider, -> (provider_id) { where("provider_id = ? OR id IN (SELECT customer_id FROM customers_providers WHERE provider_id = ?)", provider_id, provider_id) }

and the following code in my Ability.rb

can action, Customer, Customer.for_provider

Jul 23 '15 17:07 evilbikes79

Where does the exception occur.

MyAbility.new(user).can action, Customer, Customer.for_provider(some_id) ?

This looks like something in your application is checking for a permission on a customer, with an instance of customer, that cannot be authorized with sql since you already have that instnace.

Jul 23 '15 18:07 Senjai

@tjwudi @evilbikes79 I had the same issue recently. This is what I found (I realize this is an old issue but it's never too late to share the solution): Instead of writing can :manage, Shop, Shop.user_owns(user.id) write can :manage, Shop, id: Shop.user_owns(user.id).map { |shop| shop.id }