diff --git a/app/controllers/admin/personal_plugin_intros_controller.rb b/app/controllers/admin/personal_plugin_intros_controller.rb index 18ffb8b..109eff7 100644 --- a/app/controllers/admin/personal_plugin_intros_controller.rb +++ b/app/controllers/admin/personal_plugin_intros_controller.rb @@ -1,5 +1,6 @@ class Admin::PersonalPluginIntrosController < OrbitMemberController def index + if has_access? get_types @plugin_intro = @types.where(member_profile_id: params[:member_profile_id]).first rescue nil @@ -12,9 +13,15 @@ class Admin::PersonalPluginIntrosController < OrbitMemberController @url = polymorphic_path(["admin", @plugin_intro]) @verb = :put end + else + render_401 + end end def new + if !has_access? + render_401 + end end def show @@ -34,6 +41,10 @@ class Admin::PersonalPluginIntrosController < OrbitMemberController end def edit + debugger + if !has_access? + render_401 + end end def update diff --git a/app/controllers/orbit_member_controller.rb b/app/controllers/orbit_member_controller.rb index 986e7a4..d8e2429 100644 --- a/app/controllers/orbit_member_controller.rb +++ b/app/controllers/orbit_member_controller.rb @@ -23,4 +23,10 @@ class OrbitMemberController < ApplicationController def set_module_app @module_app = ModuleApp.find_by_key("member") end + + def allow_admin_only + if !current_user.is_admin? + render_401 + end + end end