I am working on a centralized authorization framework. I have models
for: App, Permission, and Role.
In app.rb:
has_many :admins, :through => :permissions,
:source => :user, :include => :roles,
:conditions => [‘roles.app_admin = ?’, true]
The above defines which users are administrators for apps, via the
boolean that’s part of a Role under the App.
This works fine standalone, by just obtaining @app.admins.
What is broken is when I do something like:
App.find(54).admins.include?(User.find_by_login(‘jdoe’))
I get:
ActiveRecord::StatementInvalid: SQLite3::SQLException: ambiguous column
name: permissions.user_id: SELECT DISTINCT “users”.id FROM “users” LEFT
OUTER JOIN “permissions” ON (“users”.“id” = “permissions”.“user_id”)
LEFT OUTER JOIN “roles” ON (“roles”.“id” = “permissions”.“role_id”)
INNER JOIN “permissions” ON “users”.id = “permissions”.user_id WHERE
(“users”.“id” = 1399) AND ((“permissions”.app_id = 54) AND
((roles.app_admin = ‘t’))) LIMIT 1
Rails is joining users.id to permissions.id twice and SQL thus barfs.
Can anyone help me determine why? It seems to be something related to
running include? along with this specific type of model relationship. I
know I can workaround it with the collect method or such but the SQL is
not nearly as efficient.
Thank you!