From f44e6646f1161b8f9e8ca8b5f1b475bb07723529 Mon Sep 17 00:00:00 2001 From: Harry Bomrah Date: Thu, 31 Jul 2014 21:50:49 +0800 Subject: [PATCH] fixed some member stuff --- .../admin/personal_plugin_intros_controller.rb | 11 +++++++++++ app/controllers/orbit_member_controller.rb | 6 ++++++ 2 files changed, 17 insertions(+) diff --git a/app/controllers/admin/personal_plugin_intros_controller.rb b/app/controllers/admin/personal_plugin_intros_controller.rb index 18ffb8b..109eff7 100644 --- a/app/controllers/admin/personal_plugin_intros_controller.rb +++ b/app/controllers/admin/personal_plugin_intros_controller.rb @@ -1,5 +1,6 @@ class Admin::PersonalPluginIntrosController < OrbitMemberController def index + if has_access? get_types @plugin_intro = @types.where(member_profile_id: params[:member_profile_id]).first rescue nil @@ -12,9 +13,15 @@ class Admin::PersonalPluginIntrosController < OrbitMemberController @url = polymorphic_path(["admin", @plugin_intro]) @verb = :put end + else + render_401 + end end def new + if !has_access? + render_401 + end end def show @@ -34,6 +41,10 @@ class Admin::PersonalPluginIntrosController < OrbitMemberController end def edit + debugger + if !has_access? + render_401 + end end def update diff --git a/app/controllers/orbit_member_controller.rb b/app/controllers/orbit_member_controller.rb index 986e7a4..d8e2429 100644 --- a/app/controllers/orbit_member_controller.rb +++ b/app/controllers/orbit_member_controller.rb @@ -23,4 +23,10 @@ class OrbitMemberController < ApplicationController def set_module_app @module_app = ModuleApp.find_by_key("member") end + + def allow_admin_only + if !current_user.is_admin? + render_401 + end + end end