Sha256: cadbf24de417d87516f14a0ab4fdafdaac73d4321fa12868f0a7e1c3d56a0620
Contents?: true
Size: 1.58 KB
Versions: 1
Compression:
Stored size: 1.58 KB
Contents
+--- + +Private Attachments +------------------- +If you want to place files behind a controller in order to perform validation you can. + +In your routes.rb file mount the paperclip engine with any path you'd like. +Ex: +```ruby +mount PaperclipPrivate::Engine => 'paperclip/' +``` + +You have to register class names and their attachments with the whitelist registry. This can happen in the controller or in config/paperclip_private.rb +The following example would whitelist the class PrivateAttachment's file: +```ruby +require 'paperclip_private' +PaperclipPrivate::Whitelist.register({PrivateAttachment: :file}) +``` +You can also pass an array of names like `{PrivateAttachment: [:file, :avatar]}`. + +Then in your model add `privacy: :private` to the has_attached_file options. This can also accept a lambda that gets passed the attachment instance and expects back either `:private` or `:public`. +Then add the method `can_download_attachment?`. +The method `can_download_attachment?` gets passed the controller instance and the params and is expected to return true, false, or raise Paperclip::Errors::AccessDeniedError. +The controller is passed so that methods like current_user can be run on it to get the user instance for validation puprposes. Duplicated params gets passed to do things like allow anyone if the style is :thumb or to only allow :original to paid users. +Ex: +```ruby + has_attached_file :file, privacy: :private + + def can_download_attachment?(controller, params) + params[:style] == :thumb || (!controller.current_user.nil? && created_by == controller.current_user.id) + end +```
Version data entries
1 entries across 1 versions & 1 rubygems
Version | Path |
---|---|
paperclip_private-0.0.3 | README.md |