Download as
Browse Code »

Commit cb2ab95043a8a48720fd1662f8dc8fad74db2b34

Authored by MoisesMachado
1 parent 6a3a49d6
Exists in master and in 29 other branches add_member_task_reject_details, admin_visible_profile, article-list-template, community_notifications, contact_admin_translation, event_fixes, fix_comments_pagination, fix_rails4_organization_ratings, fix_sign_up_form, follow_step_fix, forum_topic_creation, mirror_block_improvements, multi_env_on_remote_user, new_security, noosfero_spb_ci, organization_ratings_improvements, organization_ratings_link_to_profile_stable-spb-1.3, organization_ratings_translations_fix, profile_api_improvements, ratings_minor_fixes, remote_user_fix, send_email_to_admins, stable-spb-1.3, stable-spb-1.3-fixes, stable-spb-1.4, stable-spb-1.5, suggest_rejected_value, web_steps_improvements, xss_terminate_custom_options

ActionItem111: enabled access_control everywhere 


git-svn-id: https://svn.colivre.coop.br/svn/noosfero/trunk@739 3f533792-8f58-4932-b0fe-aaf55b0a4547
Showing 7 changed files with 8 additions and 8 deletions   Show diff stats
app/controllers/environment_admin/region_validators_controller.rb
  Diff comments   View file @cb2ab95
@@ -2,6 +2,7 @@ class RegionValidatorsController < ApplicationController @@ -2,6 +2,7 @@ class RegionValidatorsController < ApplicationController
2 2
3 before_filter :load_region_and_search, :except => 'index' 3 before_filter :load_region_and_search, :except => 'index'
4 4
  5 + protect [:index, :region, :search, :add, :remove], 'manage_environment_validators', environment
5 def index 6 def index
6 @regions = Region.top_level_for(environment) 7 @regions = Region.top_level_for(environment)
7 end 8 end
app/controllers/profile_admin/cms_controller.rb
  Diff comments   View file @cb2ab95
@@ -5,6 +5,5 @@ class CmsController < ComatoseAdminController @@ -5,6 +5,5 @@ class CmsController < ComatoseAdminController
5 5
6 define_option :page_class, Article 6 define_option :page_class, Article
7 7
8 - # not yet  
9 - # protect [:edit, :new, :reorder, :delete], :post_content, :profile 8 + protect [:edit, :new, :reorder, :delete], :post_content, :profile
10 end 9 end
app/controllers/profile_admin/membership_editor_controller.rb
  Diff comments   View file @cb2ab95
@@ -4,7 +4,7 @@ class MembershipEditorController < ProfileAdminController @@ -4,7 +4,7 @@ class MembershipEditorController < ProfileAdminController
4 4
5 needs_profile 5 needs_profile
6 6
7 -# protect [:index, :new_enterprise, :create_enterprise ], 'edit_profile', profile 7 + protect [:index, :new_enterprise, :create_enterprise ], 'edit_profile', profile
8 8
9 def index 9 def index
10 @memberships = current_user.person.memberships 10 @memberships = current_user.person.memberships
app/controllers/profile_admin/profile_editor_controller.rb
  Diff comments   View file @cb2ab95
@@ -3,8 +3,7 @@ class ProfileEditorController < ProfileAdminController @@ -3,8 +3,7 @@ class ProfileEditorController < ProfileAdminController
3 3
4 design_editor :holder => 'profile', :autosave => true, :block_types => :block_types 4 design_editor :holder => 'profile', :autosave => true, :block_types => :block_types
5 5
6 -# protect [:edit], 'edit_profile', profile  
7 -# protect [] 6 + protect [:edit], 'edit_profile', profile
8 7
9 def block_types 8 def block_types
10 { 9 {
@@ -15,7 +14,6 @@ class ProfileEditorController < ProfileAdminController @@ -15,7 +14,6 @@ class ProfileEditorController < ProfileAdminController
15 } 14 }
16 end 15 end
17 16
18 -  
19 # edits the profile info (posts back) 17 # edits the profile info (posts back)
20 def edit 18 def edit
21 if request.post? 19 if request.post?
app/controllers/profile_admin/profile_members_controller.rb
  Diff comments   View file @cb2ab95
1 class ProfileMembersController < ProfileAdminController 1 class ProfileMembersController < ProfileAdminController
2 2
3 -# protect [:index, :change_roles, :update_roles, :change_role, :add_role, :remove_role, :unassociate], 'manage_memberships', profile 3 + protect [:index, :change_roles, :update_roles, :change_role, :add_role, :remove_role, :unassociate], 'manage_memberships', profile
4 4
5 def index 5 def index
6 @members = profile.people.uniq 6 @members = profile.people.uniq
app/controllers/public/account_controller.rb
  Diff comments   View file @cb2ab95
@@ -36,6 +36,8 @@ class AccountController &lt; PublicController @@ -36,6 +36,8 @@ class AccountController &lt; PublicController
36 @user.person.environment = environment 36 @user.person.environment = environment
37 @user.person.save! 37 @user.person.save!
38 self.current_user = @user 38 self.current_user = @user
  39 + owner_role = Role.find_by_name('owner')
  40 + @user.person.affiliate(@user.person, [owner_role]) if owner_role
39 redirect_back_or_default(homepage_path(:profile => current_user.login)) 41 redirect_back_or_default(homepage_path(:profile => current_user.login))
40 flash[:notice] = _("Thanks for signing up!") 42 flash[:notice] = _("Thanks for signing up!")
41 end 43 end
script/anhetegua
  Diff comments   View file @cb2ab95
@@ -56,7 +56,7 @@ owner_role = Role.create!(:name =&gt; &#39;owner&#39;, :permissions =&gt; [&#39;edit_profile&#39;, &#39;de @@ -56,7 +56,7 @@ owner_role = Role.create!(:name =&gt; &#39;owner&#39;, :permissions =&gt; [&#39;edit_profile&#39;, &#39;de
56 56
57 # root user of the system, admin_role for him, the assignment of the role for him and the ownership of the system homepage 57 # root user of the system, admin_role for him, the assignment of the role for him and the ownership of the system homepage
58 root = User.create!(:login => 'root', :email => 'root@noosfero.org', :password => 'root', :password_confirmation => 'root').person 58 root = User.create!(:login => 'root', :email => 'root@noosfero.org', :password => 'root', :password_confirmation => 'root').person
59 -admin_role = Role.create!(:name => 'admin', :permissions => ['edit_environment_features', 'edit_environment_design', 'manage_environment_categories', 'manage_environment_roles', 'manage_environment_validators']) 59 +admin_role = Role.create!(:name => 'admin', :permissions => ['view_environment_admin_panel','edit_environment_features', 'edit_environment_design', 'manage_environment_categories', 'manage_environment_roles', 'manage_environment_validators'])
60 RoleAssignment.create!(:accessor => root, :role => admin_role, :resource => nil) 60 RoleAssignment.create!(:accessor => root, :role => admin_role, :resource => nil)
61 RoleAssignment.create!(:accessor => root, :role => owner_role, :resource => noosfero) 61 RoleAssignment.create!(:accessor => root, :role => owner_role, :resource => noosfero)
62 62