Question

I would like to implement this

class SecurityTransgression < StandardError; end

 def create
   raise SecurityTransgression unless ...
 end

class ApplicationController < ActionController::Base
  def rescue_action(e)
  case e
    when SecurityTransgression
      head :forbidden
    end
  end
end

from the this blogpost.

The problem is it does not work. I dont see a forbidden page but standard Rails error page “SecurityViolation in MyController#action”. I digged that some rescue_action methods works only in the production mode. I tried that and it is the same. No change.

My question: is there any good documentation of the rescue_action method (and others)? Does this work under Rails 3.0? Because it seems this is some old

Answer 1

Take a look at rescue_from at the API documentation.