fix member edit_privilege authorization

This commit is contained in:
manson 2014-08-08 18:41:49 +08:00
parent ced6643246
commit 285335b0c3
2 changed files with 2 additions and 2 deletions

View File

@ -234,7 +234,7 @@ class Admin::MembersController < OrbitMemberController
end
def edit_privilege
if has_access?
if current_user.is_admin?
@user = @member.user
@workgroup = Workgroup.find_by(key: 'admin')
else

View File

@ -17,7 +17,7 @@
<div class="btn-group">
<%= link_to("<i class='icon-edit'></i> #{t(:edit)}".html_safe,edit_admin_member_path(@member),:class=>"btn btn-mini" ) if has_access? %>
<%= link_to("<i class='icons-cycle'></i> #{t("users.change_passwd")}".html_safe,admin_member_edit_passwd_path(@member),:class=>"btn btn-mini" ) if has_access? %>
<%= link_to("<i class='icons-lock-open'></i> #{t("users.setting_privilege")}".html_safe,admin_member_edit_privilege_path(@member),:class=>"btn btn-mini" ) if has_access? %>
<%= link_to("<i class='icons-lock-open'></i> #{t("users.setting_privilege")}".html_safe,admin_member_edit_privilege_path(@member),:class=>"btn btn-mini" ) if current_user.is_admin? %>
</div>
</div>