Unable to find policy when ids are passed to the params about pundit HOT 4 CLOSED

Thank you for taking the time. authorize Expense has solved the issue.

from pundit.

I'd guess that you have namespacing overrides somewhere in your code, probably something like this in your controller:

def authorize(record, query = nil)
  super([:expense, record], query)
end

If so then that's probably the reason for your issue.

If that's not the case, then a reproduce example would help a lot! A github repo or gist that we can run that exhibits the problem ☺️

from pundit.

I managed to strip down my application to the basic form that will reproduce this issue. Github repo available here. Heroku app that will fire the exception when you press the export button is here.

from pundit.

Hi!

I believe I found your issue. I missed it in your first example code.

  @expenses = Expense.find( params[:expense_ids] )
  
  authorize @expenses

@expenses here is an array of multiple records. When Pundit is passed an array like this the front items are assumed to be a namespace. This is the reason the lookup fails.

You either need to authorize Expense, which will use export? to authorize. If you need more context (e.g. which records are included?), perhaps modelling your export as an object on its own (ExportService) and authorizing that might be an idea worth exploring.

from pundit.