{"id":37988,"date":"2024-07-16T06:27:39","date_gmt":"2024-07-16T06:27:39","guid":{"rendered":"https:\/\/www.railscarma.com\/?p=37988"},"modified":"2024-07-16T06:27:43","modified_gmt":"2024-07-16T06:27:43","slug":"pundit-gem%e3%81%a7rails%e3%81%ae%e8%aa%8d%e5%8f%af%e3%82%92%e3%83%9e%e3%82%b9%e3%82%bf%e3%83%bc%e3%81%99%e3%82%8b","status":"publish","type":"post","link":"https:\/\/www.railscarma.com\/ja\/%e3%83%96%e3%83%ad%e3%82%b0\/pundit-gem%e3%81%a7rails%e3%81%ae%e8%aa%8d%e5%8f%af%e3%82%92%e3%83%9e%e3%82%b9%e3%82%bf%e3%83%bc%e3%81%99%e3%82%8b\/","title":{"rendered":"Pundit Gem\u3067Rails\u306e\u8a8d\u53ef\u3092\u30de\u30b9\u30bf\u30fc\u3059\u308b"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\u8a8d\u53ef\u306f\u3001\u30e6\u30fc\u30b6\u304c\u8a31\u53ef\u3055\u308c\u305f\u30ea\u30bd\u30fc\u30b9\u306b\u3057\u304b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u306a\u3044\u3088\u3046\u306b\u3059\u308b\u3001\u3042\u3089\u3086\u308bWeb\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u91cd\u8981\u306a\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3067\u3059\u3002Pundit\u306fRuby on Rails\u7528\u306e\u8a8d\u53ef\u30e9\u30a4\u30d6\u30e9\u30ea\u3068\u3057\u3066\u4eba\u6c17\u304c\u3042\u308a\u3001\u958b\u767a\u8005\u306f\u304d\u3081\u7d30\u304b\u3044\u30a2\u30af\u30bb\u30b9\u30eb\u30fc\u30eb\u3092\u5b9a\u7fa9\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u3053\u306e\u8a18\u4e8b\u3067\u306f\u3001Ruby on Rails\u3067Pundit gem\u3092\u4f7f\u3063\u3066\u8a8d\u53ef\u3092\u884c\u3046\u65b9\u6cd5\u3092\u8aac\u660e\u3057\u307e\u3059\u3002 Rails\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3<\/a>\u4f8b\u3092\u6319\u3052\u3066\u8aac\u660e\u3059\u308b\u3002<\/p>\n

<\/p>\n

\u30b9\u30c6\u30c3\u30d7\u30fb\u30d0\u30a4\u30fb\u30b9\u30c6\u30c3\u30d7\u30fb\u30ac\u30a4\u30c9 <\/b><\/h2>\n

1.Rails\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306bPundit\u3092\u8ffd\u52a0\u3059\u308b<\/b><\/p>\n

\u307e\u305a\u3001Gemfile\u306bPundit\u3092\u8ffd\u52a0\u3057\u3001bundle install\u3092\u5b9f\u884c\u3059\u308b\uff1a<\/p>\n

<\/p>\n

\u5b9d\u77f3\u300c\u8a55\u8ad6\u5bb6<\/pre>\n

<\/p>\n
\u30d0\u30f3\u30c9\u30eb\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/pre>\n
\u6b21\u306b\u3001Pundit\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u30d5\u30a1\u30a4\u30eb\u3092\u751f\u6210\u3057\u307e\u3059\uff1a<\/p>\n
<\/p>\n
rails generate pundit:install<\/pre>\n
\u3053\u308c\u306f application_policy.rb<\/b> \u30d5\u30a1\u30a4\u30eb\u3092 app\/policies \u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u7f6e\u304f\u3002<\/p>\n
2.\u30dd\u30ea\u30b7\u30fc\u306e\u5b9a\u7fa9
<\/b>Pundit\u306e\u30dd\u30ea\u30b7\u30fc\u306f\u3001\u8a8d\u53ef\u30ed\u30b8\u30c3\u30af\u3092\u30ab\u30d7\u30bb\u30eb\u5316\u3057\u305fPORO\uff08Plain Old Ruby Objects\uff09\u3067\u3059\u3002\u305d\u308c\u305e\u308c\u306e\u30dd\u30ea\u30b7\u30fc\u306f\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30e2\u30c7\u30eb\u306b\u5bfe\u5fdc\u3057\u3066\u3044\u307e\u3059\u3002\u7c21\u5358\u306a\u4f8b\u3068\u3057\u3066\u3001Post\u30e2\u30c7\u30eb\u304c\u3042\u308a\u3001\u305d\u308c\u306b\u5bfe\u3059\u308b\u8a8d\u53ef\u30eb\u30fc\u30eb\u3092\u5b9a\u7fa9\u3059\u308b\u5834\u5408\u3092\u8003\u3048\u3066\u307f\u307e\u3057\u3087\u3046\u3002<\/p>\n
Post\u30e2\u30c7\u30eb\u306e\u30dd\u30ea\u30b7\u30fc\u3092\u4f5c\u6210\u3059\u308b\uff1a<\/b><\/p>\n
<\/p>\n
rails\u306fpundit:policy post\u3092\u751f\u6210\u3059\u308b<\/pre>\n
\u3053\u308c\u306b\u3088\u308a post_policy.rb <\/b>\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u6210\u3059\u308b\u3002<\/p>\n
3.\u8a8d\u8a3c\u30ed\u30b8\u30c3\u30af\u306e\u5b9f\u88c5
<\/b>post_policy.rb\u30d5\u30a1\u30a4\u30eb\u3092\u958b\u304d\u3001\u8a8d\u53ef\u30eb\u30fc\u30eb\u3092\u5b9a\u7fa9\u3059\u308b\uff1a<\/p>\n
class PostPolicy < ApplicationPolicy\n  def index?\n    true\n  \u7d42\u4e86\n\n  def show?\n    true\n  \u7d42\u4e86\n\n  def create?\n    user.present?\n  end\n\n  def update?\n    user.present? && user == record.user\n  end\n\n  def destroy?\n    user.present? && user == record.user\n  end\n\u7d42\u4e86
<\/pre>\n
\u3053\u3053\u3067\u306f\u3001\u5404\u30a2\u30af\u30b7\u30e7\u30f3\uff08index?\u3001show?\u3001create?\u3001update?\u3001destroy?\uff09\u306b\u5bfe\u5fdc\u3059\u308b\u30e1\u30bd\u30c3\u30c9\u3092\u5b9a\u7fa9\u3057\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u30e1\u30bd\u30c3\u30c9\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u3068\u30a2\u30af\u30bb\u30b9\u3055\u308c\u3066\u3044\u308b\u30ec\u30b3\u30fc\u30c9\u306b\u57fa\u3065\u3044\u3066\u771f\u304b\u507d\u3092\u8fd4\u3057\u307e\u3059\u3002<\/p>\n
4.\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u3067\u306e\u30dd\u30ea\u30b7\u30fc\u306e\u4f7f\u7528
<\/b>\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u3067\u306f\u3001Pundit \u3092\u4f7f\u3063\u3066\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u8a8d\u53ef\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u307e\u305a\u3001Pundit \u30e2\u30b8\u30e5\u30fc\u30eb\u3092 ApplicationController \u306b\u30a4\u30f3\u30af\u30eb\u30fc\u30c9\u3057\u307e\u3059\uff1a<\/p>\n
<\/p>\n
class ApplicationController < ActionController::Base
\u30d1\u30f3\u30c7\u30a3\u30c3\u30c8
\u7d42\u308f\u308a<\/pre>\n
\u305d\u3057\u3066\u3001authorize \u30e1\u30bd\u30c3\u30c9\u3092\u4f7f\u7528\u3057\u3066 PostsController \u306e\u8a8d\u53ef\u3092\u30c1\u30a7\u30c3\u30af\u3057\u307e\u3059\uff1a<\/p>\n
<\/p>\n
class PostsController < ApplicationController\n  before_action :authenticate_user\uff01\n  before_action :set_post, only: [:show, :edit, :update, :destroy] \u3067\u3059\u3002\n\n  def index\n    posts = Post.all\n    posts\u3092\u8a8d\u8a3c\u3059\u308b\n  \u7d42\u4e86\n\n  def show\n  \u7d42\u4e86\n\n  def new\n    post = Post.new\n    post\u3092\u8a8d\u53ef\u3059\u308b\n  \u7d42\u4e86\n\n  def create\n    post = current_user.posts.build(post_params)\n    post\u3092\u8a8d\u53ef\u3059\u308b\n    if @post.save\n      redirect_to @post, notice: '\u6295\u7a3f\u306f\u6b63\u5e38\u306b\u4f5c\u6210\u3055\u308c\u307e\u3057\u305f\u3002'\n    else\n      render :new\n    \u7d42\u4e86\n  \u7d42\u4e86\n\n  def edit\n    \u6295\u7a3f\u3092\u627f\u8a8d\u3059\u308b\n  \u7d42\u4e86\n\n  def update\n    post\u3092\u8a8d\u53ef\u3059\u308b\n    if @post.update(post_params)\n      redirect_to @post, notice: '\u6295\u7a3f\u306f\u6b63\u5e38\u306b\u66f4\u65b0\u3055\u308c\u307e\u3057\u305f\u3002'\n    else\n      render :edit\n    end\n  \u7d42\u4e86\n\n  def destroy\n    post\u3092\u8a8d\u53ef\u3059\u308b\n    post.destroy\n    redirect_to posts_url, notice: '\u6295\u7a3f\u306f\u6b63\u5e38\u306b\u7834\u68c4\u3055\u308c\u307e\u3057\u305f\u3002'\n  \u7d42\u4e86\n\n  \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\n\n  def set_post\n    post = Post.find(params[:id])\n  \u7d42\u4e86\n\n  def post_params\n    params.require(:post).permit(:title, :body)\n  end\n\u7d42\u4e86
<\/pre>\n
\u3053\u306e\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u3067\u306f\u3001\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u3059\u308b\u524d\u306bauthorize\u3092\u4f7f\u7528\u3057\u3066\u6a29\u9650\u3092\u30c1\u30a7\u30c3\u30af\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n
5.\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3078\u306e\u5bfe\u5fdc
<\/b>Pundit \u306f\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u3059\u308b\u6a29\u9650\u304c\u306a\u3044\u5834\u5408\u306b Pundit::NotAuthorizedError \u3092\u767a\u751f\u3055\u305b\u307e\u3059\u3002\u3053\u306e\u30a8\u30e9\u30fc\u306f\u3001ApplicationController \u3067\u30b0\u30ed\u30fc\u30d0\u30eb\u306b\u6271\u3046\u3053\u3068\u304c\u3067\u304d\u307e\u3059\uff1a<\/p>\n
class ApplicationController < ActionController::Base\n  \u30a4\u30f3\u30af\u30eb\u30fc\u30c9 Pundit\n\n  rescue_from Pundit::NotAuthorizedError, with: :user_not_authorized\n\n  private\n\n  def user_not_authorized\n    flash[:alert] = "\u3053\u306e\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u3059\u308b\u6a29\u9650\u304c\u3042\u308a\u307e\u305b\u3093\u3002"\n    redirect_to(request.referrer || root_path)\n  \u30a8\u30f3\u30c9\n\u7d42\u4e86
<\/pre>\n
\u3053\u3046\u3059\u308b\u3053\u3068\u3067\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u4e0d\u6b63\u306a\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u3057\u3088\u3046\u3068\u3059\u308b\u3068\u3001\u30a8\u30e9\u30fc\u30e1\u30c3\u30bb\u30fc\u30b8\u3068\u3068\u3082\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3055\u308c\u308b\u3002<\/p>\n
<\/p>\n
\u7d50\u8ad6<\/b><\/h2>\n
Rails\u306e\u8a8d\u53ef\u306bPundit\u3092\u4f7f\u3046\u3068\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30ea\u30bd\u30fc\u30b9\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u5f37\u529b\u304b\u3064\u67d4\u8edf\u306b\u5236\u5fa1\u3067\u304d\u307e\u3059\u3002\u30dd\u30ea\u30b7\u30fc\u3092\u5b9a\u7fa9\u3057\u3066\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u3067\u4f7f\u7528\u3059\u308b\u3053\u3068\u3067\u3001\u30e6\u30fc\u30b6\u304c\u8a31\u53ef\u3055\u308c\u305f\u30a2\u30af\u30b7\u30e7\u30f3\u3057\u304b\u5b9f\u884c\u3067\u304d\u306a\u3044\u3088\u3046\u306b\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u3053\u3053\u3067\u306f\u57fa\u672c\u7684\u306a\u3053\u3068\u3092\u8aac\u660e\u3057\u307e\u3057\u305f\u304c\u3001Pundit\u306f\u30b9\u30b3\u30fc\u30d7\u3084\u30ab\u30b9\u30bf\u30e0\u30dd\u30ea\u30b7\u30fc\u30b8\u30a7\u30cd\u30ec\u30fc\u30bf\u306a\u3069\u3001\u3088\u308a\u8907\u96d1\u306a\u30b7\u30ca\u30ea\u30aa\u3082\u30b5\u30dd\u30fc\u30c8\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n
\u3088\u308a\u8a73\u7d30\u306a\u60c5\u5831\u306b\u3064\u3044\u3066\u306f Pundit GitHub\u30ea\u30dd\u30b8\u30c8\u30ea<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t  
\r\n        
\u95a2\u9023\u8a18\u4e8b<\/div>\r\n    
\r\n\r\n            
\r\n            
\r\n    \r\n\r\n      \"\u30aa\u30d5\u30ea\u30d0\u30c6\u30a3\u30fb\u30eb\u30d3\u30fc\u30fb\u30b8\u30a7\u30e0\"\r\n\r\n    <\/a>\r\n  <\/div>\r\n\r\n  \r\n        Offliberty Ruby Gem\u3068\u306f\uff1f  <\/a>\r\n\r\n        <\/div>\r\n              
\r\n            
\r\n    \r\n\r\n      \"Rails\r\n\r\n    <\/a>\r\n  <\/div>\r\n\r\n  \r\n        Rails\u306elink_to\u30e1\u30bd\u30c3\u30c9\uff1a\u4f8b\u306b\u3088\u308b\u5b8c\u5168\u30ac\u30a4\u30c9  <\/a>\r\n\r\n        <\/div>\r\n              
\r\n            
\r\n    \r\n\r\n      \"Ruby\r\n\r\n    <\/a>\r\n  <\/div>\r\n\r\n  \r\n        Ruby on Rails\u3092\u4f7f\u3063\u3066\u30b9\u30b1\u30fc\u30e9\u30d6\u30eb\u306aSaaS\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3092\u69cb\u7bc9\u3059\u308b\u65b9\u6cd5  <\/a>\r\n\r\n        <\/div>\r\n              
\r\n            
\r\n    \r\n\r\n      \"\u30eb\u30d3\u30fc\u6b63\u898f\u8868\u73fe\u30de\u30c3\u30c1\"\r\n\r\n    <\/a>\r\n  <\/div>\r\n\r\n  \r\n        Ruby\u6b63\u898f\u8868\u73fe\u30de\u30c3\u30c1\u30ac\u30a4\u30c9\uff082026\uff09\u4f8b\u4ed8\u304d  <\/a>\r\n\r\n        <\/div>\r\n      \r\n  <\/div>\r\n\r\n