Question

I have an action that doesn’t require a form. So it really only needs the one ‘edit’ method instead of the RESTful ‘edit’ –> ‘update’. Is there any reason not to do this or a better way?

def edit
  #Do a POST(PUT)
end

Answer 1

The harm is that a user could easily navigate to that url and perform a potentially destructive action.

/noform/edit   #URL typed by user => Action Performed
/noform/update #URL typed by user => Error is thrown, No Action Performed

A normal browsing experience generates GET requests to the server. The assumption is, any page you can easily navigate to (or type into your address bar) will not perform any data changing functions.

A POST request, generated via a form submission or a AJAX request expects the result that data is changed on the server.

Similarly the two rails “faked” versions of PUT and DELETE also are not actions you could simply navigate to using a browser.

The solution

The solution is to have only the update action and where you originally would have linked to edit use something like the following:

button_to "Add new tracker", noform_path, :method => :put

If there is any type of error, you may still need an edit path to show the user so they can correct something. But from what you have described, a single update action should do the trick.