Help with account location plugin

rubyonrails-talk
1

Hi All,

I'm using the account_location plugin and have got it setup OK so that when I view the index action in my controller, the objects displayed are those restricted to that account (done by an account_id attribute on the model).

My problem is that when I move on to the show action e.g. objects/1 I can change the id and access an object that doesn't belong to that account.

I know I can fix this on an action by action basis but thought there must be a DRY way of doing this. All help appreciated.

Thanks

Robin

2

http://agilewebdevelopment.com/plugins/scopecontrollermodel

Haven’t used it yet, so please let me know how it works out for you.

Best regards

Peter De Berdt