Fixed permissions

Evandro Junior
1 parent ecb3bad5
Showing 2 changed files with 10 additions and 10 deletions Show diff stats
controllers/email_article_plugin_myprofile_controller.rb
lib/email_article_plugin.rb
 class EmailArticlePluginMyprofileController < MyProfileController
   needs_profile
+  
 #  before_filter :check_access_to_profile, :except => [:join, :join_not_logged, :index, :add]
 #  before_filter :store_location, :only => [:join, :join_not_logged, :report_abuse, :send_mail]
 #  before_filter :login_required, :only => [:add, :join, :join_not_logged, :leave, :unblock, :leave_scrap, :remove_scrap, :remove_activity, :view_more_activities, :view_more_network_activities, :report_abuse, :register_report, :leave_comment_on_activity, :send_mail]
   def send_email
-    article = Article.find(params[:id])
-    EmailArticlePluginMyprofileController::Sender.deliver_mail(article)
-    render :text=>'ok'
+    if user.is_admin?(profile)
+      article = Article.find(params[:id])
+      EmailArticlePluginMyprofileController::Sender.deliver_mail(article)
+      render :text=>'ok'
+    end
   end
   class Sender < ActionMailer::Base
@@ -12,7 +12,8 @@ class EmailArticlePlugin &lt; Noosfero::Plugin
     label = _("Send article to members")
     htmlclass = _("button with-text icon-menu-mail")
     title = _("Email article to all community members")
-      lambda {
+    lambda {
+      if user.is_admin?(profile) and @page.kind_of?(TextArticle)      
         link_to_remote(
             label,
             {
@@ -25,11 +26,7 @@ class EmailArticlePlugin &lt; Noosfero::Plugin
             :class => htmlclass,
             :title => title
          )
-      }
+      end   
+    }
   end
-
-  def stylesheet?
-    true
-  end
-
 end