photomix/app/controllers/application_controller.rb

80 lines
2.1 KiB
Ruby
Raw Normal View History

2009-05-22 14:13:46 +02:00
# Filters added to this controller apply to all controllers in the application.
# Likewise, all the methods added will be available for all controllers.
class ApplicationController < ActionController::Base
helper :all # include all helpers, all the time
protect_from_forgery # See ActionController::RequestForgeryProtection for details
2009-05-22 16:14:07 +02:00
filter_parameter_logging :password, :password_confirmation
helper_method :current_user, :current_user_session
2009-05-22 21:04:41 +02:00
2009-05-22 16:14:07 +02:00
private
2009-05-22 16:14:07 +02:00
def current_user_session
return @current_user_session if defined?(@current_user_session)
@current_user_session = UserSession.find
end
2009-05-22 14:13:46 +02:00
2009-05-22 16:14:07 +02:00
def current_user
return @current_user if defined?(@current_user)
@current_user = current_user_session && current_user_session.user
end
def require_role(roles = [])
unless current_user && current_user.in_role?(*roles)
store_location
flash[:notice] = "You must have permission to access this page"
2009-06-09 00:30:22 +02:00
redirect_to account_path
return false
end
2009-06-09 00:30:22 +02:00
return true
end
def require_role_admin
2009-06-09 00:30:22 +02:00
return false if !require_user
return require_role("admin")
end
def require_permission(permissions = [])
2009-06-09 00:30:22 +02:00
return false if !require_user
unless current_user && current_user.has_permission?(*permissions)
store_location
flash[:notice] = "You must have permission to access this page"
2009-06-09 00:30:22 +02:00
redirect_to account_path
return false
end
2009-06-09 00:30:22 +02:00
return true
end
2009-05-22 16:14:07 +02:00
def require_user
unless current_user
store_location
flash[:notice] = "You must be logged in to access this page"
2009-06-09 00:30:22 +02:00
redirect_to login_path
2009-05-22 16:14:07 +02:00
return false
end
2009-06-09 00:30:22 +02:00
return true
2009-05-22 16:14:07 +02:00
end
def require_no_user
if current_user
store_location
2009-06-09 00:30:22 +02:00
flash[:notice] = "Already logged in. Please logout"
redirect_to account_path
2009-05-22 16:14:07 +02:00
return false
end
2009-06-09 00:30:22 +02:00
return true
2009-05-22 16:14:07 +02:00
end
def store_location
session[:return_to] = request.request_uri
end
def redirect_back_or_default(default)
redirect_to(session[:return_to] || default)
session[:return_to] = nil
end
2009-05-22 14:13:46 +02:00
end