saurabh
/
orbit-4-2
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix app authorized

This commit is contained in:
spen 2014-05-08 10:53:44 +08:00
parent 9205f47590
commit feefc99db8
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/helpers/orbit_backend_helper.rb
View File

@ -353,9 +353,9 @@ module OrbitBackendHelper
def is_authorized(object) def is_authorized(object)
autorized = @module_app.authorizable_models.inject(false) do |autorized, klass| autorized = @module_app.authorizable_models.inject(false) do |autorized, klass|
if object.is_a?(klass.constantize) if object.is_a?(klass.constantize)
autorized ||= object.user_can_sub_manage?(current_user) autorized ||= (object.user_can_sub_manage?(current_user) and object.create_user_id == current_user.id)
else else
autorized ||= object.send(klass.underscore).user_can_sub_manage?(current_user) autorized ||= (object.send(klass.underscore).user_can_sub_manage?(current_user) and object.create_user_id == current_user.id)
end end
autorized autorized
end end