Download as
Browse Code »

Commit 403fa5effb8154d7ed342c152507d1641eb145a1

Authored by Antonio Terceiro
1 parent 43c3c5f7
Exists in master and in 28 other branches 1.2+SPB2, 2_split_by_role, add_fields_in_api, api_fixies, api_pagination, api_private_token, api_tasks, article_hit_count, blog_page_bug, checkbox_to_user_can_edit_page, communities_ratings, communities_ratings_moderation, community_ratings_rebase, fix_cloned_article_parent, fix_gallery_image_url, fix_javascript_categories, fix_optional_fields, fix_suggest_article, fix_user_email_validation, highlight_block_fix, notification_plugin, notification_plugin_rebase, script_to_update, split_by_role, stable, temp_ratings, tests, tests_fixies

ActionItem618: redirecting to login before giving "access denied"

Showing 3 changed files with 14 additions and 1 deletions   Show diff stats
app/controllers/my_profile_controller.rb
  Diff comments   View file @403fa5e
... ... @@ -4,6 +4,8 @@ class MyProfileController < ApplicationController
4 4  
5 5 require_ssl
6 6  
  7 + before_filter :login_required
  8 +
7 9 # declares that the controller needs an specific type of profile. Example:
8 10 #
9 11 # class PersonDetailControlles < ProfileAdminController
... ...
lib/authenticated_system.rb
  Diff comments   View file @403fa5e
... ... @@ -86,7 +86,7 @@ module AuthenticatedSystem
86 86 # Redirect to the URI stored by the most recent store_location call or
87 87 # to the passed default.
88 88 def redirect_back_or_default(default)
89   - session[:return_to] ? redirect_to_url(session[:return_to]) : redirect_to(default)
  89 + session[:return_to] ? redirect_to(session[:return_to]) : redirect_to(default)
90 90 session[:return_to] = nil
91 91 end
92 92  
... ...
test/integration/login_to_the_application_test.rb
  Diff comments   View file @403fa5e
... ... @@ -18,4 +18,15 @@ class LoginToTheApplicationTest &lt; ActionController::IntegrationTest
18 18  
19 19 end
20 20  
  21 + def test_unauthenticated_user_tries_to_access_his_control_panel
  22 + Environment.any_instance.stubs(:disable_ssl).returns(true) # ignore SSL for this test
  23 +
  24 + get '/myprofile/ze'
  25 + assert_redirected_to '/account/login'
  26 +
  27 + post '/account/login', :user => { :login => 'ze', :password => "test" }
  28 +
  29 + assert_redirected_to '/myprofile/ze'
  30 + end
  31 +
21 32 end
... ...