Stop the current password requirement for development

Question

I have a problem with the editing section of my site. For some reason, I continue to receive the error message "Current password cannot be empty" when I try to change the user. We use the utility to manage users, but I can not find the code anywhere that could cause this error.

Here is the code for the form:

- semantic_form_for(resource, :as => resource_name, :url => registration_path(resource_name), :html => { :method => :put }) do |form| = devise_error_messages! = form.semantic_errors = form.input :first = form.input :last = form.input :birth_year, as: :select, collection: User.birth_range.to_a.reverse %i= t('users.edit.cast_biometrics_hint') = form.input :gender, as: :select, collection: gender_options, include_blank: false = form.input :eye_color, as: :select, collection: eye_color_options, required: false = form.input :hair_color, as: :select, collection: hair_color_options, required: false = form.input :ethnicity, as: :select, collection: ethnicity_options, required: false %li.select.optional#user_height_input %label{for: 'user_height'} Height %select#user_height_ft{name: 'user[height_ft]'} = options_for_select 0..9, resource.height_ft %span ft   %select#user_height_in{name: 'user[height_in]'} = options_for_select 0..11, resource.height_in %span in = form.buttons 

Answer 1

The wiki designer has more information about this. https://github.com/plataformatec/devise/wiki/How-To%3a-Allow-users-to-edit-their-account-without-providing-a-password

Answer 2

Found a solution here:

https://github.com/plataformatec/devise/wiki/How-To%3a-Allow-users-to-edit-their-account-without-providing-a-password

Answer 3

I could not find a solution that worked without providing current_password!

Does this solution still verify the correct password and confirmation_password if a password is present?

So, I created an updated version of update_with_password in user.rb

 def admin_update_with_password(params, *options) current_password = params.delete(:current_password) if params[:password].blank? params.delete(:password) params.delete(:password_confirmation) if params[:password_confirmation].blank? end result = unless update_attributes(params, *options) self.assign_attributes(params, *options) self.valid? self.errors.add(:current_password, current_password.blank? ? :blank : :invalid) false end clean_up_passwords result end 

and in my users_controller.rb

 def update @user = User.find(params[:id]) email_changed = @user.email != params[:user][:email] password_changed = !params[:user][:password].empty? successfully_updated = if email_changed or password_changed @user.admin_update_with_password(params[:user]) else @user.update_without_password(params[:user]) end if successfully_updated flash[:notice] = "User updated successfully" redirect_to redirect_path else render "edit" end end