我如何讓用戶只能查看他們的列表與ruby和sinatra

Question

我的ruby和sinatra應用程序目前允許用戶查看和編輯所有創建的列表，我還沒有弄清楚如何僅向用戶顯示列表創造它們。

這裏是我的lists_controller是什麼樣子：

class ListsController < ApplicationController 

get "/lists" do 
    redirect_if_not_logged_in 
    @lists = List.all 
    erb :'lists/index' 
end 

get "/lists/new" do 
    redirect_if_not_logged_in 
    @error_message = params[:error] 
    erb :'lists/new' 
end 

get "/lists/:id/edit" do 
    redirect_if_not_logged_in 
    @error_message = params[:error] 
    @list = List.find(params[:id]) 
    erb :'lists/edit' 
end 

delete '/lists/:id/delete' do 
    @list = List.find_by_id(params[:id]) 
    @list.delete 
    redirect to '/lists' 
end 

post "/lists/:id" do 
    redirect_if_not_logged_in 
    @list = List.find(params[:id]) 
    unless List.valid_params?(params) 
    redirect "/lists/#{@list.id}/edit?error=invalid list" 
    end 
    @list.update(params.select{|a|a=="todo_name"|| a=="todo_list"}) 
    redirect "/lists/#{@list.id}" 
end 

get "/lists/:id" do 
    redirect_if_not_logged_in 
    @list = List.find(params[:id]) 
    erb :'lists/show' 
end 

post "/lists" do 
    redirect_if_not_logged_in 
    unless List.valid_params?(params) 
    redirect "/lists/new?error=invalid list" 
    end 
    List.create(params) 
    redirect "/lists" 
end 
end 

Answer 1

問題在於內

@lists = List.all 

在Rails W/ActiveRecord的（假設你的List模型belongs_to的User），你可以代替這樣做

@lists = List.where(user_id: current_user.id)