82 lines
2.2 KiB
Ruby
82 lines
2.2 KiB
Ruby
# Filters added to this controller apply to all controllers in the application.
|
|
# Likewise, all the methods added will be available for all controllers.
|
|
|
|
class ApplicationController < ActionController::Base
|
|
helper :all # include all helpers, all the time
|
|
protect_from_forgery # See ActionController::RequestForgeryProtection for details
|
|
|
|
filter_parameter_logging :password, :password_confirmation
|
|
helper_method :current_user, :current_user_session
|
|
|
|
|
|
private
|
|
|
|
def check_public_access
|
|
require_user unless APP_CONFIG[:public]
|
|
end
|
|
|
|
def current_user_session
|
|
return @current_user_session if defined?(@current_user_session)
|
|
@current_user_session = UserSession.find
|
|
end
|
|
|
|
def current_user
|
|
return @current_user if defined?(@current_user)
|
|
@current_user = current_user_session && current_user_session.user
|
|
end
|
|
|
|
def require_role(roles = [])
|
|
unless current_user && current_user.in_role?(*roles)
|
|
store_location
|
|
flash[:notice] = "You must have permission to access this page"
|
|
redirect_to account_path
|
|
return false
|
|
end
|
|
return true
|
|
end
|
|
|
|
def require_role_admin
|
|
return false if !require_user
|
|
return require_role("admin")
|
|
end
|
|
|
|
def require_permission(permissions = [])
|
|
return false if !require_user
|
|
unless current_user && current_user.has_permission?(*permissions)
|
|
store_location
|
|
flash[:notice] = "You must have permission to access this page"
|
|
redirect_to account_path
|
|
return false
|
|
end
|
|
return true
|
|
end
|
|
|
|
def require_user
|
|
unless current_user
|
|
store_location
|
|
flash[:notice] = "You must be logged in to access this page"
|
|
redirect_to login_path
|
|
return false
|
|
end
|
|
return true
|
|
end
|
|
|
|
def require_no_user
|
|
if current_user
|
|
store_location
|
|
flash[:notice] = "Already logged in. Please logout"
|
|
redirect_to account_path
|
|
return false
|
|
end
|
|
return true
|
|
end
|
|
|
|
def store_location
|
|
session[:return_to] = request.request_uri
|
|
end
|
|
|
|
def redirect_back_or_default(default)
|
|
redirect_to(session[:return_to] || default)
|
|
session[:return_to] = nil
|
|
end
|
|
end
|