Download as
Browse Code »

Commit c05eb777fc994bf818e730154968839134ed9e85

Authored by Larissa Reis
1 parent e44cab7f
Exists in master and in 29 other branches add_member_task_reject_details, admin_visible_profile, article-list-template, community_notifications, contact_admin_translation, event_fixes, fix_comments_pagination, fix_rails4_organization_ratings, fix_sign_up_form, follow_step_fix, forum_topic_creation, mirror_block_improvements, multi_env_on_remote_user, new_security, noosfero_spb_ci, organization_ratings_improvements, organization_ratings_link_to_profile_stable-spb-1.3, organization_ratings_translations_fix, profile_api_improvements, ratings_minor_fixes, remote_user_fix, send_email_to_admins, stable-spb-1.3, stable-spb-1.3-fixes, stable-spb-1.4, stable-spb-1.5, suggest_rejected_value, web_steps_improvements, xss_terminate_custom_options

spread-functionality: fixes permissions

Showing 1 changed file with 2 additions and 2 deletions   Show diff stats
app/controllers/my_profile/cms_controller.rb
  Diff comments   View file @c05eb77
@@ -27,7 +27,7 @@ class CmsController < MyProfileController @@ -27,7 +27,7 @@ class CmsController < MyProfileController
27 (user && (user.has_permission?('post_content', profile) || user.has_permission?('publish_content', profile))) 27 (user && (user.has_permission?('post_content', profile) || user.has_permission?('publish_content', profile)))
28 end 28 end
29 29
30 - protect_if :except => [:suggest_an_article, :set_home_page, :edit, :destroy, :publish, :upload_files, :new] do |c, user, profile| 30 + protect_if :except => [:suggest_an_article, :set_home_page, :edit, :destroy, :publish, :publish_on_portal_community, :publish_on_communities, :search_communities_to_publish, :upload_files, :new] do |c, user, profile|
31 user && (user.has_permission?('post_content', profile) || user.has_permission?('publish_content', profile)) 31 user && (user.has_permission?('post_content', profile) || user.has_permission?('publish_content', profile))
32 end 32 end
33 33
@@ -37,7 +37,7 @@ class CmsController < MyProfileController @@ -37,7 +37,7 @@ class CmsController < MyProfileController
37 (user && (user.has_permission?('post_content', profile) || user.has_permission?('publish_content', profile))) 37 (user && (user.has_permission?('post_content', profile) || user.has_permission?('publish_content', profile)))
38 end 38 end
39 39
40 - protect_if :only => [:destroy, :publish] do |c, user, profile| 40 + protect_if :only => :destroy do |c, user, profile|
41 profile.articles.find(c.params[:id]).allow_post_content?(user) 41 profile.articles.find(c.params[:id]).allow_post_content?(user)
42 end 42 end
43 43