# 然後編輯 app/models/user.rb 加上 has_many :vtables 類似這樣的位置：
# ---app/models/user.rb 開始 ---
require 'digest/sha1'
class User < ActiveRecord::Base
has_many :vtables
  # Virtual attribute for the unencrypted password
....
# ---app/models/user.rb 結束 ---
# 編輯 --- app/models/vtable.rb 開始 ---
class Vtable < ActiveRecord::Base
belongs_to :user
validates_uniqueness_of   :vname, :case_sensitive => false
validates_format_of :forward, :with => /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\Z/i
validates_format_of :vname, :with => /\A[a-z0-9\._-]*\Z/i
validates_length_of :vname, :in => 3..20, :allow_nil => false
end
# --- app/models/vtable.rb 結束 ---

class VtablesController < ApplicationController
include AuthenticatedSystem
before_filter :login_required
  def index
# 修改始
#    @vtables = Vtable.find(:all)
    @vtables = Vtable.find_all_by_user_id(current_user.id)
# 修改結束

    respond_to do |format|
      format.html # index.html.erb
      format.xml  { render :xml => @vtables }
    end
  end

  def show
    @vtable = Vtable.find(params[:id])
# 新增始
    if @vtable.user_id != current_user.id
        flash[:notice] = '不可偷看不是自己帳號的內容！'
        render :text => '不可偷看不是自己帳號的內容！'
        return
    end
# 新增結束

    respond_to do |format|
      format.html # show.html.erb
      format.xml  { render :xml => @vtable }
    end
  end

  def new
    @vtable = Vtable.new

    respond_to do |format|
      format.html # new.html.erb
      format.xml  { render :xml => @vtable }
    end
  end

  # GET /vtables/1/edit
  def edit
    @vtable = Vtable.find(params[:id])
# 新增始
    if @vtable.user_id != current_user.id
        flash[:notice] = '不可偷改不是自己帳號的內容！'
        render :text => '不可偷改不是自己帳號的內容！'
        return
    end
# 新增結束
  end

  def create
    @vtable = Vtable.new(params[:vtable])
# 新增始
    if @vtable.user_id != current_user.id
        flash[:notice] = '不可偷新增不是自己帳號的內容！'
        render :text => '不可偷新增不是自己帳號的內容！'
        return
    end
# 新增結束

    respond_to do |format|
      if @vtable.save
        flash[:notice] = 'Vtable was successfully created.'
        format.html { redirect_to(@vtable) }
        format.xml  { render :xml => @vtable, :status => :created, :location => @vtable }
# 寫到 /etc/mail/virtusertable 及生效的動作
output
      else
        format.html { render :action => "new" }
        format.xml  { render :xml => @vtable.errors, :status => :unprocessable_entity }
      end
    end
  end

  def update
    @vtable = Vtable.find(params[:id])
# 新增始
    if @vtable.user_id != current_user.id
        flash[:notice] = '不可偷更新不是自己帳號的內容！'
        render :text => '不可偷更新不是自己帳號的內容！'
        return
    end
# 新增結束
# 寫到 /etc/mail/virtusertable 及生效的動作
output

    respond_to do |format|
      if @vtable.update_attributes(params[:vtable])
        flash[:notice] = 'Vtable was successfully updated.'
        format.html { redirect_to(@vtable) }
        format.xml  { head :ok }
      else
        format.html { render :action => "edit" }
        format.xml  { render :xml => @vtable.errors, :status => :unprocessable_entity }
      end
    end
  end

  # DELETE /vtables/1
  # DELETE /vtables/1.xml
  def destroy
    @vtable = Vtable.find(params[:id])
# 新增始
    if @vtable.user_id != current_user.id
        flash[:notice] = '不可偷刪不是自己帳號的內容！'
        render :text => '不可偷刪不是自己帳號的內容！'
        return
    end
# 新增結束

    @vtable.destroy
# 寫到 /etc/mail/virtusertable 及生效的動作
output

    respond_to do |format|
      format.html { redirect_to(vtables_url) }
      format.xml  { head :ok }
    end
  end

# 新增始
private
 def output
   @filename = '/etc/mail/virtusertable'
   system "> #{@filename}"
  @vs = Vtable.find(:all)
  @vs.each do |v|
   system "echo #{v.vname}@虛擬主機名 #{v.forward} >>  #{@filename}"
   system "/usr/sbin/makemap hash #{@filename} < #{@filename}"
  end
 end
# 新增結束
end