Download as
Browse Code »

Commit adbdc376e08522c209f98abcb224103bff17753f

Authored by Junior Silva
1 parent 0ab99b38
Exists in master and in 29 other branches add_member_task_reject_details, admin_visible_profile, article-list-template, community_notifications, contact_admin_translation, event_fixes, fix_comments_pagination, fix_rails4_organization_ratings, fix_sign_up_form, follow_step_fix, forum_topic_creation, mirror_block_improvements, multi_env_on_remote_user, new_security, noosfero_spb_ci, organization_ratings_improvements, organization_ratings_link_to_profile_stable-spb-1.3, organization_ratings_translations_fix, profile_api_improvements, ratings_minor_fixes, remote_user_fix, send_email_to_admins, stable-spb-1.3, stable-spb-1.3-fixes, stable-spb-1.4, stable-spb-1.5, suggest_rejected_value, web_steps_improvements, xss_terminate_custom_options

change-password-permission: disabled change password to user without login 

AI3148
Showing 2 changed files with 6 additions and 1 deletions   Show diff stats
app/controllers/public/account_controller.rb
  Diff comments   View file @adbdc37
@@ -2,7 +2,7 @@ class AccountController < ApplicationController @@ -2,7 +2,7 @@ class AccountController < ApplicationController
2 2
3 no_design_blocks 3 no_design_blocks
4 4
5 - before_filter :login_required, :only => [:activation_question, :accept_terms, :activate_enterprise] 5 + before_filter :login_required, :only => [:activation_question, :accept_terms, :activate_enterprise, :change_password]
6 before_filter :redirect_if_logged_in, :only => [:login, :signup] 6 before_filter :redirect_if_logged_in, :only => [:login, :signup]
7 before_filter :protect_from_bots, :only => :signup 7 before_filter :protect_from_bots, :only => :signup
8 8
test/functional/account_controller_test.rb
  Diff comments   View file @adbdc37
@@ -213,6 +213,11 @@ class AccountControllerTest < ActionController::TestCase @@ -213,6 +213,11 @@ class AccountControllerTest < ActionController::TestCase
213 assert_equal users(:ze), @controller.send(:current_user) 213 assert_equal users(:ze), @controller.send(:current_user)
214 end 214 end
215 215
  216 + should 'require login to change password' do
  217 + post :change_password
  218 + assert_redirected_to :controller => 'account', :action => 'login'
  219 + end
  220 +
216 should 'provide a "I forget my password" link at the login page' do 221 should 'provide a "I forget my password" link at the login page' do
217 get :login 222 get :login
218 assert_tag :tag => 'a', :attributes => { 223 assert_tag :tag => 'a', :attributes => {