diff options
author | elijah <elijah@riseup.net> | 2013-07-02 23:11:23 -0700 |
---|---|---|
committer | elijah <elijah@riseup.net> | 2013-07-04 04:04:55 -0700 |
commit | e996432cbd50f4dadaae0ff62ac3f286ab125b1f (patch) | |
tree | fa05b7a2fefc737e336399515e45630c99f904f0 /users/app/controllers/controller_extension | |
parent | 4863ce5e78d880f1ca8a1874cd03022afb061f4a (diff) |
add js to report all errors to the user, not just ones related to field validation.
Diffstat (limited to 'users/app/controllers/controller_extension')
-rw-r--r-- | users/app/controllers/controller_extension/authentication.rb | 15 |
1 files changed, 12 insertions, 3 deletions
diff --git a/users/app/controllers/controller_extension/authentication.rb b/users/app/controllers/controller_extension/authentication.rb index f0a6564..72df7a7 100644 --- a/users/app/controllers/controller_extension/authentication.rb +++ b/users/app/controllers/controller_extension/authentication.rb @@ -38,9 +38,18 @@ module ControllerExtension::Authentication end def access_denied - # TODO: should we redirect to the root_url in either case, and have the root_url include the login screen (and also ability to create unauthenticated tickets) when no user is logged in? - redirect_to login_url, :alert => "Not authorized" if !logged_in? - redirect_to root_url, :alert => "Not authorized" if logged_in? + respond_to do |format| + format.html do + if logged_in? + redirect_to root_url, :alert => t(:not_authorized) + else + redirect_to login_url, :alert => t(:not_authorized_login) + end + end + format.json do + render :json => {'error' => t(:not_authorized)}, status: :unprocessable_entity + end + end end def admin? |