Download as
Browse Code »

Commit e035ee75310410abca3db9fd51fecf2de03954da

Authored by MoisesMachado
1 parent d4a24e85
Exists in master and in 29 other branches add_member_task_reject_details, admin_visible_profile, article-list-template, community_notifications, contact_admin_translation, event_fixes, fix_comments_pagination, fix_rails4_organization_ratings, fix_sign_up_form, follow_step_fix, forum_topic_creation, mirror_block_improvements, multi_env_on_remote_user, new_security, noosfero_spb_ci, organization_ratings_improvements, organization_ratings_link_to_profile_stable-spb-1.3, organization_ratings_translations_fix, profile_api_improvements, ratings_minor_fixes, remote_user_fix, send_email_to_admins, stable-spb-1.3, stable-spb-1.3-fixes, stable-spb-1.4, stable-spb-1.5, suggest_rejected_value, web_steps_improvements, xss_terminate_custom_options

ActionItem85: applied the permission check to the cms controller 

git-svn-id: https://svn.colivre.coop.br/svn/noosfero/trunk@765 3f533792-8f58-4932-b0fe-aaf55b0a4547
Showing 1 changed file with 8 additions and 2 deletions   Show diff stats
app/controllers/profile_admin/cms_controller.rb
  Diff comments   View file @e035ee7
1 1 class CmsController < ComatoseAdminController
2 2 extend PermissionCheck
3   -
  3 +
4 4 ApplicationController.needs_profile
5 5  
6 6 define_option :page_class, Article
7 7  
8   -# protect [:edit, :new, :reorder, :delete], :post_content, :profile
  8 + protect [:edit, :new, :reorder, :delete], 'post_content', :profile
  9 +
  10 + protected
  11 +
  12 + def profile
  13 + Profile.find_by_identifier(params[:profile])
  14 + end
9 15 end
... ...