On Feb 24, 5:47 am, James Salter <[email protected]> wrote:
> it seems to me like it would be sensible to provide an option
> (possibly a default) to verify that restful resources are accessed
> using only the correct http verbs.
>
> one alternative is to have in the ApplicationController:
>
> verify :method => :post, :only => [ :post ]
> verify :method => :put, :only => [ :update ]
> verify :method => :delete, :only => [ :destroy ]
Or if you delete the default route from routes.rb then you don't need
this.
Fred
>
> which seems to work ok .. although it breaks the tests for
> restful_authentication, apparently (yet to look into it)
>
> thoughts?
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby
on Rails: Talk" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---