You may also want to look at the :shallow option to map.resources - it does pretty much what you're looking for.
--Matt Jones On Jul 3, 6:13 pm, Erwin <[email protected]> wrote: > my question is maybe silly.... but it's already July 4th .. and I am > tired.. > > until now I have been using in my tests the following routes > (simplified version) > > map.resources :academies do |academies| > academies.resources :ecourses > academies.resources :instructors > academies.resources :trainees > end > > so I get the URL type : /academies/1/libraries from > academy_libraries_path(current_user.academy) > > the current_user being defined , and he is always logged into one > academy when working ( current_user.academy) > > I wonder is it possible to replace academy_id in the URL with a > string 'CURRENT' ? and have : > > /academies/CURRENT/libraries (then nobody could hack the academy) > > or is it better to keep the REST URL type and perform a security check > (permit ) in the controller ?? > > thanks --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---
