add authorization

This commit is contained in:
manson 2014-08-01 12:24:34 +08:00
parent 0a087e1df4
commit 510fb3bf0b
4 changed files with 18 additions and 11 deletions

View File

@ -1,4 +1,6 @@
class Admin::PatentTypesController < OrbitAdminController class Admin::PatentTypesController < OrbitMemberController
before_action :allow_admin_only
def new def new
@patent_type = PatentType.new @patent_type = PatentType.new
@url = admin_patent_types_path(@patent_type) @url = admin_patent_types_path(@patent_type)

View File

@ -4,6 +4,9 @@ class Admin::PatentsController < OrbitMemberController
before_action :set_plugin before_action :set_plugin
before_action :get_settings,:only => [:new, :edit, :setting] before_action :get_settings,:only => [:new, :edit, :setting]
before_action :need_access_right
before_action :allow_admin_only, :only => [:index, :setting]
def index def index
@patents = Patent.order_by(:year=>'desc').page(params[:page]).per(10) @patents = Patent.order_by(:year=>'desc').page(params[:page]).per(10)
end end
@ -17,7 +20,7 @@ class Admin::PatentsController < OrbitMemberController
@member = MemberProfile.find(patent_params['member_profile_id']) rescue nil @member = MemberProfile.find(patent_params['member_profile_id']) rescue nil
@patent = Patent.new(patent_params) @patent = Patent.new(patent_params)
@patent.save @patent.save
redirect_to URI.encode('/admin/members/'+@member.to_param+'/Patent') redirect_to params['referer_url']
end end
def edit def edit
@ -30,7 +33,7 @@ class Admin::PatentsController < OrbitMemberController
@patent = Patent.find(params[:id]) @patent = Patent.find(params[:id])
@patent.update_attributes(patent_params) @patent.update_attributes(patent_params)
@patent.save @patent.save
redirect_to URI.encode('/admin/members/'+@member.to_param+'/Patent') redirect_to params['referer_url']
end end
def destroy def destroy

View File

@ -208,6 +208,7 @@
<!-- Form Actions --> <!-- Form Actions -->
<div class="form-actions"> <div class="form-actions">
<%= f.hidden_field :user_id, :value => params[:user_id] if !params[:user_id].blank? %> <%= f.hidden_field :user_id, :value => params[:user_id] if !params[:user_id].blank? %>
<input type="hidden" name="referer_url" value="<%= request.referer %>">
<%= f.submit t('submit'), class: 'btn btn-primary' %> <%= f.submit t('submit'), class: 'btn btn-primary' %>
<%= link_to t('cancel'), get_go_back, :class=>"btn" %> <%= link_to t('cancel'), get_go_back, :class=>"btn" %>
</div> </div>

View File

@ -6,15 +6,14 @@
<% end %> <% end %>
<% <%
is_autorized_user = (current_user==@member.user || current_user.is_admin?) if has_access?
if is_autorized_user
@patents = Patent.where(member_profile_id: @member.id).desc(:year).page(params[:page]).per(10) @patents = Patent.where(member_profile_id: @member.id).desc(:year).page(params[:page]).per(10)
else else
@patents = Patent.where(is_hidden: false, member_profile_id: @member.id).desc(:year).page(params[:page]).per(10) @patents = Patent.where(is_hidden: false, member_profile_id: @member.id).desc(:year).page(params[:page]).per(10)
end end
%> %>
<% if is_autorized_user %> <% if has_access? %>
<div class="list-active"> <div class="list-active">
<div class="btn-group"> <div class="btn-group">
<%= link_to('Hide', '#', :class => "btn btn-mini list-active-btn disabled", "data-check-action" => "list-be-hide", :rel => toggle_hide_admin_patents_path(member_profile_id: params[:id], disable: 'true') ) %> <%= link_to('Hide', '#', :class => "btn btn-mini list-active-btn disabled", "data-check-action" => "list-be-hide", :rel => toggle_hide_admin_patents_path(member_profile_id: params[:id], disable: 'true') ) %>
@ -26,7 +25,7 @@
<table class="table table-condensed table-striped main-list"> <table class="table table-condensed table-striped main-list">
<thead> <thead>
<tr> <tr>
<% if is_autorized_user %> <% if has_access? %>
<th><input type="checkbox" /></th> <th><input type="checkbox" /></th>
<% end -%> <% end -%>
<th class="span3"><%= t('personal_patent.publication_date') %></th> <th class="span3"><%= t('personal_patent.publication_date') %></th>
@ -39,7 +38,7 @@
<tbody> <tbody>
<% @patents.each do |patent| %> <% @patents.each do |patent| %>
<tr id="<%= dom_id patent %>" class="<%= patent.is_hidden ? "checkHide" : "" %>"> <tr id="<%= dom_id patent %>" class="<%= patent.is_hidden ? "checkHide" : "" %>">
<% if is_autorized_user %> <% if has_access? %>
<td> <td>
<%= check_box_tag 'to_change[]', patent.id.to_s, false, :class => "list-check" %> <%= check_box_tag 'to_change[]', patent.id.to_s, false, :class => "list-check" %>
</td> </td>
@ -49,8 +48,10 @@
<%= link_to patent.patent_title, OrbitHelper.url_to_plugin_show(patent.to_param,'personal_patent').to_s, target: "blank"%> <%= link_to patent.patent_title, OrbitHelper.url_to_plugin_show(patent.to_param,'personal_patent').to_s, target: "blank"%>
<div class="quick-edit"> <div class="quick-edit">
<ul class="nav nav-pills hide"> <ul class="nav nav-pills hide">
<% if has_access? %>
<li><%= link_to t('edit'), '/admin/members/'+@member.to_param+'/patents/'+patent.id+'/edit' %></li> <li><%= link_to t('edit'), '/admin/members/'+@member.to_param+'/patents/'+patent.id+'/edit' %></li>
<li><%= link_to t(:delete_), admin_patent_path(id: patent.id, member_profile_id: @member.id), method: :delete, remote: true, data: { confirm: t('sure?') } %></li> <li><%= link_to t(:delete_), admin_patent_path(id: patent.id, member_profile_id: @member.id), method: :delete, remote: true, data: { confirm: t('sure?') } %></li>
<% end %>
</ul> </ul>
</div> </div>
</td> </td>
@ -64,7 +65,7 @@
<div class="bottomnav clearfix"> <div class="bottomnav clearfix">
<% if is_autorized_user %> <% if has_access? %>
<div class="action pull-right"> <div class="action pull-right">
<%= link_to content_tag(:i, nil, :class => 'icon-edit') +' '+ t('setting'),'/admin/members/'+@member.to_param+'/patents/frontend_setting', :class => 'btn btn-primary' %> <%= link_to content_tag(:i, nil, :class => 'icon-edit') +' '+ t('setting'),'/admin/members/'+@member.to_param+'/patents/frontend_setting', :class => 'btn btn-primary' %>
<%= link_to content_tag(:i, nil, :class => 'icon-plus') +' '+ t('new_'), <%= link_to content_tag(:i, nil, :class => 'icon-plus') +' '+ t('new_'),