How to list all Rails 3 controllers and its public methods

Question

I would like to create a checking tool/rake task, that would dynamically go through all the public methods that are possibly accessible from outside world and check our authorization rules.

For this I would need to collect all the controllers and all its public methods. How to do that? I would like to use Ruby reflection or metadata techniques rather than grepping files.

it only makes sense if you have a catch-all rule like match ':controller(/:action(/:id(.:format)))' — Art Shayderov
– Art Shayderov, Commented Dec 2, 2011 at 10:40

riffraff · Accepted Answer · 2011-12-02 10:33:15Z

2

AFAICT this is impossible to do in the general case as you can't tell which params go where, e.g. /items/foo/id or /items/foo?bar=baz ? Also, which values of the params are ok ?

But you can get a decent value with

Rails.application.routes.routes.map(&:path)

which shall give you a list in the form used in rake routes (/klass/:id/action(.:format))

answered Dec 2, 2011 at 10:33

riffraff

2,4561 gold badge23 silver badges32 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

lzap Over a year ago

I will be checking just authorization rules (if its is present and what the rules are). Thanks

riffraff Over a year ago

yes, I meant that for example you may have authorization for the edit of an item that is possible for administrators and for the users who originally created them but not for other users, which depends on a suitable choice of the params.

Collectives™ on Stack Overflow

How to list all Rails 3 controllers and its public methods

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related