Ruby on Rails创建Project时Unpermitted parameters错误求助

你的问题出在表单结构和强参数配置不匹配，以及对belongs_to关联的表单处理方式有误，具体修正步骤如下：

1. 修正表单（_form.html.erb） #

你当前用了f.fields_for :team和f.fields_for :company来处理关联，但belongs_to关联不需要嵌套字段，直接通过主表单传递外键team_id和company_id即可。修改后的表单代码：

<%= form_with(model: @project, class: "contents") do |f| %>
  <% if @project.errors.any? %>
    <div id="error_explanation" class="bg-red-50 text-red-500 px-3 py-2 font-medium rounded-lg mt-3">
      <h2><%= pluralize(@project.errors.count, "error") %> prohibited this project from being saved:</h2>

      <ul>
        <% @project.errors.each do |error| %>
          <li><%= error.full_message %></li>
        <% end %>
      </ul>
    </div>
  <% end %>

  <div class="my-5">
    <%= f.label :name %>
    <%= f.text_field :name, class: "block shadow rounded-md border border-gray-200 outline-none px-3 py-2 mt-2 w-full" %>
  </div>

  <div class="my-5">
    <%= f.label :description %>
    <%= f.text_area :description, rows: 4, class: "block shadow rounded-md border border-gray-200 outline-none px-3 py-2 mt-2 w-full" %>
  </div>

  <!-- 直接使用主表单的collection_select，去掉fields_for -->
  <div class="my-5">
    <%= f.label :team_id %>
    <%= f.collection_select :team_id, Team.order(:name), :id, :name, { prompt: true }, { class: "block shadow rounded-md border border-gray-200 outline-none px-3 py-2 mt-2 w-full appearance-none" } %>
  </div>

  <div class="my-5">
    <%= f.label :company_id %>
    <%= f.collection_select :company_id, Company.order(:name), :id, :name, { prompt: true }, { class: "block shadow rounded-md border border-gray-200 outline-none px-3 py-2 mt-2 w-full appearance-none" } %>
  </div>

  <div class="my-5">
    <%= f.label :estimated_completion_date %>
    <%= f.date_field :estimated_completion_date, class: "block shadow rounded-md border border-gray-200 outline-none px-3 py-2 mt-2 w-full" %>
  </div>

  <div class="my-5">
    <%= f.label :completion_date %>
    <%= f.date_field :completion_date, class: "block shadow rounded-md border border-gray-200 outline-none px-3 py-2 mt-2 w-full" %>
  </div>
  
  <div class="inline">
    <%= f.submit class: "rounded-lg py-3 px-5 bg-blue-600 text-white inline-block font-medium cursor-pointer" %>
  </div>
<% end %>

2. 修正控制器的强参数（projects_controller.rb） #

你当前许可的是team_attributes和company_attributes，但实际上我们只需要许可外键team_id和company_id：

private

def project_params
  params.require(:project).permit(
    :name, 
    :description, 
    :estimated_completion_date, 
    :completion_date,
    :team_id,  # 替换team_attributes
    :company_id # 替换company_attributes
  )
end

问题根源解释 #

• fields_for是用于处理嵌套属性（需要在模型中添加accepts_nested_attributes_for :team, :company），但你的场景是Project属于Team和Company，只需要传递外键ID即可，不需要嵌套字段。
• 控制器的强参数必须和表单提交的参数结构匹配，之前的配置和表单提交的team、company嵌套结构不对应，导致出现未许可参数错误。

额外检查 #

确保你的projects数据表中存在team_id和company_id这两个字段，如果没有，需要生成迁移添加：

rails generate migration AddTeamAndCompanyToProjects team:references company:references
rails db:migrate

内容的提问来源于stack exchange，提问作者Ellis Brookes