Take the tour ×  I cant get this rule to be enforced at all...
it allows anyone to get to this action.  Here's my rule  role
:student do     has_permission_on :relationships do        to
:index       if_attribute :student_id=> is {user.student.id}
Heres my controller action  class RelationshipsController <
ApplicationController  filter_resource_access :nested_in =>
:students   def index    @guardians = @student.guardians    I
know I have it set up correctly cause this rule is working fine
has_permission_on :students do        to :show
if_attribute :id => is {user.student.id}  Where is the error in
my rule definition?  Please Help  share|improve this question
add comment  1 Answer  It's hard to test, but try this:
if_attribute :id=> is {user.student.id} share|improve this
answer add comment  Your Answer