设计：更改任何用户密码管理

所以这看起来很简单，我有一个控制器动作，看起来像这样：设计：更改任何用户密码管理

class Admin::UsersController < Admin::BaseController 
... 
def update_password 
    @user = User.find(params[:user][:id]) 
    @user.password = params[:user][:password] 
    if @user.save! 
    Notifier.admin_password_change(@user).deliver 
    flash[:success] = "Password Changed!" 
    redirect_to edit_admin_user_path(@user) 
    else 
    render "edit" 
    end 
end 
end

，它似乎永远不会工作。我需要更高级的东西吗？以下是我在滑轨控制台中看到的内容：

Started PUT "/admin/users/update_password" for 127.0.0.1 at 2013-07-15 10:01:50 -0600 
Processing by Admin::UsersController#update_password as HTML 
    Parameters: {"utf8"=>"✓", "authenticity_token"=>"ipedx2MJDZTQct6I4FUObrzDpMNl3pQWNVr9Ez7bDVc=", "user"=>{"id"=>"226", "password"=>"[FILTERED]", "password_confirmation"=>"[FILTERED]"}, "commit"=>"Change Password"} 
    (6.8ms) ALTER SESSION SET EDITION = EPACT_REDESIGN 
    User Load (8.4ms) SELECT "CRED_APP_USERS".* FROM "CRED_APP_USERS" WHERE "CRED_APP_USERS"."ID_NUMBER" = 10040 AND ROWNUM <= 1 
    CodeModel Load (9.1ms) SELECT "CRED_CODES".* FROM "CRED_CODES" WHERE (table_name = 'CRED_VEHICLES' OR table_name = 'CRED_FLEET') 
    User Load (3.6ms) SELECT "CRED_APP_USERS".* FROM "CRED_APP_USERS" WHERE "CRED_APP_USERS"."ID_NUMBER" = :a1 AND ROWNUM <= 1 [["id_number", "226"]] 
    (3.3ms) UPDATE "CRED_APP_USERS" SET "ENCRYPTED_PASSWORD" = 'ENCRYPTED PASSWORD STRING', "MODIFY_DT" = TO_DATE('2013-07-15 16:01:50','YYYY-MM-DD HH24:MI:SS') WHERE "CRED_APP_USERS"."ID_NUMBER" = 226 
Rendered notifier/admin_password_change.erb (0.1ms) 

Sent mail to [email protected] (22ms) 
...

我在做什么错在这里？电子邮件在控制台中打印出来，并且:success闪光灯出现在屏幕的顶部，但密码未更改。

来源

2013-07-15 thatmiddleway

不能说我明白为什么，但我需要设置一个password_reset_token，然后它就起作用了。下面就是该方法貌似现在：

def update_password 
    @user = User.find(params[:user][:id]) 
    @user.reset_password_token = 'temp' 
    @user.save! 
    if @user.reset_password!(params[:user][:password], params[:user][:password_confirmation]) 
    Notifier.admin_password_change(@user).deliver 
    flash[:success] = "Password Changed!" 
    redirect_to edit_admin_user_path(@user) 
    else 
    render "edit" 
    end 
end

令牌获取的交口称赞reset_password!方法运行时。我找不到需要reset_password_token的文档中的任何内容，但它似乎是必需的。我不会说这段代码很漂亮，但是解决方案可行。如果别人想出更好的东西，我会改变我的答案。

来源

2013-07-15 17:10:10 thatmiddleway

设计：更改任何用户密码管理

回答

相关问题