.: the bojicas

“Owners of capital will stimulate working class to buy more and more of expensive goods, houses and technology, pushing them to take more and more expensive credits, until their debt becomes unbearable. The unpaid debt will lead to bankruptcy of banks which will have to be nationalized and State will have to take the road which will eventually lead to communism.”
[Karl Marx, 1867]

Going with the hype, I am coding in Ruby on Rails and exclusively on a Mac.

As a text editor I am using TextMate. It was love at first sight (although shared) – I know, we are talking about community here. But as many of us, I would like to see more often updates and at once that pending version 2. It is something there which says that a version increment will make us much more happy. I have a feeling it is loosing slowly its vibe. For instance: Peepcode is releasing a screencast episode about Emacs, and I am also seeing more and more blogs talking about switching to either Emacs (Carbon or Aqua) or to MacVim.

CSSEdit 2 is filling my coding gear and it helps a lot in cleaning my templates. I am a dirty hand coder in the way I am using quite often something like <div style=” …. “> directly into my code, pushing only at the end for what I need to a style sheet.

I discovered git once with Rails and since it became my right hand in versioning. I never believed it can be so easy, doesn’t matter if you are online or offline, you are alone or working along with a team. More, I agree it is more productive to have that infinite hexa number instead of 1, 2, etc as your file/project version number, because you just code, don’t tend to compare. And because I love luxury, I am using a micro account with github. Yes, I have my own secrets there, too

Ticketing and organizing my staff – I am into a personal level with the lighthouse. And the Lighthouse Keeper is giving me enough support whilst offline.

What about you?

restful_authentication plugin made its way to my projects as the “de-facto” authentication system in my Ruby on Rails projects like w2task or gistate.com. I would not insist on how to install it, as it is well explained on its home page at github.

What I want to show is that in particular instances we may not like that one user can access and modify other user’s profile. For example if I try to edit my profile, the URL will end in something like users/2/edit and if I would change it to users/1/edit then I am able to modify this user – most often an undesirable fact.

Here is my workaround:

app/controllers/users_controller.rb

  # ...
  def edit
    if params[:id].to_i == self.current_user.id
      @user = User.find(params[:id])
    else
      flash[:error] = "Not allowed!"
      redirect_back_or_default('/')
    end
  end
  # ...

That’s pretty much everything I need to change.

What is your preferred solution? Are you doing these tests into a – perhaps – before_filter?

I would like to introduce my latest project w2task - a web application written in Rails.

Wow, getting long with this post. However, for the future, I have a lot to say and I hope it will be of interest for my blog readers, as I will fly along the Rails.