diff options
author | jessib <jessib@riseup.net> | 2012-11-02 11:12:15 -0700 |
---|---|---|
committer | jessib <jessib@riseup.net> | 2012-11-02 11:12:15 -0700 |
commit | 4db41d772725387ba36240cf8f3529780e896755 (patch) | |
tree | 4c4e0f7651ee100f93273775ec934dba1a934724 /users/app/controllers | |
parent | 8b5f7fb6ef438ef034541d6fb500b5ab7e12f3f2 (diff) | |
parent | 872b9fa6759d5708f5efb19ba46b3c8e2b5d4862 (diff) |
Merge branch 'feature-admin_users' into help_develop
Diffstat (limited to 'users/app/controllers')
-rw-r--r-- | users/app/controllers/controller_extension/authentication.rb | 21 |
1 files changed, 19 insertions, 2 deletions
diff --git a/users/app/controllers/controller_extension/authentication.rb b/users/app/controllers/controller_extension/authentication.rb index 507b62f..c3342f3 100644 --- a/users/app/controllers/controller_extension/authentication.rb +++ b/users/app/controllers/controller_extension/authentication.rb @@ -4,14 +4,31 @@ module ControllerExtension::Authentication private included do - helper_method :current_user + helper_method :current_user, :logged_in?, :admin? end def current_user @current_user ||= User.find(session[:user_id]) if session[:user_id] end + def logged_in? + !!current_user + end + def authorize - redirect_to login_url, :alert => "Not authorized" if current_user.nil? + access_denied unless logged_in? end + + def access_denied + redirect_to login_url, :alert => "Not authorized" + end + + def admin? + current_user && current_user.is_admin? + end + + def authorize_admin + access_denied unless admin? + end + end |