authorization fix for create and update of plugins

This commit is contained in:
Harry Bomrah 2015-04-28 17:54:49 +08:00
parent 2f58c02ee5
commit 8c2f10e59c
2 changed files with 9 additions and 6 deletions

View File

@ -15,6 +15,8 @@ class OrbitMemberController < ApplicationController
visited_user = MemberProfile.find(params[:member_profile_id]).user.id if visited_user.nil? rescue nil
if (current_user.id == visited_user rescue false)
@user_has_privileges = true
elsif visited_user == nil && (params[:action] == "create" || params[:action] == "update")
@user_has_privileges = true
else
@user_has_privileges = false
end

View File

@ -46,10 +46,11 @@
</ul>
<%= yield :right_nav %>
</div>
<% if current_user.is_admin? %>
<div class="subnav">
<%= render 'admin/personal_plugins/plugin_list' %>
</div>
<% end %>
<%= yield %>
<%= javascript_include_tag "lib/pageslide.js" %>