In forms, unauthorized columns aren't displayed. In subforms, they're displayed, but when posting value doesn't change.
When rendering forms, update/create unauthorized attributes shouldn't be displayed as input forms or take it out of the form at all, instead, it should render show_column_value or so. This avoids users confusion since he sees an input form but the value doesn't change due to authorization restriction. This makes posible to use the same form (AS controller) for all roles (users) displaying what each user is authorized to create/update. This gives another helpful usage: you can use this to put useful data on the form that the user might need to complete a form. What do you think? --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "ActiveScaffold : Ruby on Rails plugin" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/activescaffold?hl=en -~----------~----~----~----~------~----~------~--~---
