On Saturday, 1 February 2014 20:15:38 UTC-5, Bizt wrote: > > > >> Consider, though, that if for whatever reason an invalid id is passed >> in, @account will be nil and so @account.transactions will give you >> a NoMethod error. >> >> What do you want to happen at that point? >> >> > Good point. Thanks, I'll put some checking to see if account is valid or > not and handle it accordingly. >
One quick way to do that is to use plain `find` instead of `find_by_id`, thus: @account = current_user.accounts.find(params[:account]) If a user attempts to request an account that doesn't belong to them, this will raise ActiveRecord::RecordNotFound. The default Rails rescue_from will translate that into an HTTP 404 Not Found response. --Matt Jones -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/rubyonrails-talk/68205ea7-b870-4569-8c82-2d3989c11936%40googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.

