forked from saurabh/orbit4-5
authorization fix for create and update of plugins
This commit is contained in:
parent
2f58c02ee5
commit
8c2f10e59c
|
@ -15,6 +15,8 @@ class OrbitMemberController < ApplicationController
|
|||
visited_user = MemberProfile.find(params[:member_profile_id]).user.id if visited_user.nil? rescue nil
|
||||
if (current_user.id == visited_user rescue false)
|
||||
@user_has_privileges = true
|
||||
elsif visited_user == nil && (params[:action] == "create" || params[:action] == "update")
|
||||
@user_has_privileges = true
|
||||
else
|
||||
@user_has_privileges = false
|
||||
end
|
||||
|
|
|
@ -46,10 +46,11 @@
|
|||
</ul>
|
||||
<%= yield :right_nav %>
|
||||
</div>
|
||||
|
||||
<% if current_user.is_admin? %>
|
||||
<div class="subnav">
|
||||
<%= render 'admin/personal_plugins/plugin_list' %>
|
||||
</div>
|
||||
<% end %>
|
||||
|
||||
<%= yield %>
|
||||
<%= javascript_include_tag "lib/pageslide.js" %>
|
||||
|
|
Loading…
Reference in New Issue