Fix _profile.html.erb removed is_admin?

2014-07-15 16:02:52 +08:00 · 2014-07-15 16:02:52 +08:00 · b49c582c6e
parent 42c6abe49e
commit b49c582c6e
1 changed files with 2 additions and 1 deletions
--- a/app/views/plugin/book/_profile.html.erb
+++ b/app/views/plugin/book/_profile.html.erb
@ -23,7 +23,8 @@
    @filter = {new_filter[:type] => [new_filter[:id].to_s]}
  end

-  if @member && @member.user.is_admin?
+  is_autorized_user = (current_user==@member.user || current_user.is_admin?)
+  if is_autorized_user
    @books = Book.where(member_profile_id: @member.id).desc(:year).page(params[:page]).per(10)
  else
    @books = Book.where(is_hidden: false, member_profile_id: @member.id).desc(:year).page(params[:page]).per(10)