# Active Scaffold + attachment

**URL:** <https://www.ruby-forum.com/t/active-scaffold-attachment/196449>\
**Category:** Rails\
**Created:** [August 27, 2007, 11:39pm UTC](https://www.ruby-forum.com/t/active-scaffold-attachment/196449 "2007-08-27T23:39:13Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![demoversion](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/4491bb/32.png) [@demoversion](https://www.ruby-forum.com/u/demoversion)\
**Post date:** [August 27, 2007, 11:39pm UTC](https://www.ruby-forum.com/t/active-scaffold-attachment/196449/1 "2007-08-27T23:39:13Z")

</div>

Hi all,  
I need a help to solve problem with ActiveScaffold,  
Imagine that you have a list of companies, each company has a list of  
products. If I’m administrator of some company and I want to edit my  
products I also can see(not edit, editing/deleting is possible to  
disable) other companies products.  
I need to use activescaffold for displaying/editing only data that  
connected to company that loggined by current user(of course product  
model has a company\_id, by I don’t know how to filter this data).  
Thank you for any help and advices  
Have a nice day!

---

<div class="post-metadata">

**Author:** ![demoversion](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/4491bb/32.png) [@demoversion](https://www.ruby-forum.com/u/demoversion)\
**Post date:** [September 23, 2007, 6:34am UTC](https://www.ruby-forum.com/t/active-scaffold-attachment/196449/2 "2007-09-23T06:34:43Z")

</div>

Hi Igor

You can use the conditions\_for\_collection in your controller .  
For example,

# must be after config block to work

def conditions\_for\_collection  
if ! (current\_user.is\_admin or current\_user.is\_hr)  
[“staff = ?”, current\_user.login]  
end  
end

On Aug 28, 5:39 am, “Igor K.” [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)