Download as
Browse Code »

Commit cb2ab95043a8a48720fd1662f8dc8fad74db2b34

Authored by MoisesMachado
1 parent 6a3a49d6
Exists in master and in 28 other branches 1.2+SPB2, 2_split_by_role, add_fields_in_api, api_fixies, api_pagination, api_private_token, api_tasks, article_hit_count, blog_page_bug, checkbox_to_user_can_edit_page, communities_ratings, communities_ratings_moderation, community_ratings_rebase, fix_cloned_article_parent, fix_gallery_image_url, fix_javascript_categories, fix_optional_fields, fix_suggest_article, fix_user_email_validation, highlight_block_fix, notification_plugin, notification_plugin_rebase, script_to_update, split_by_role, stable, temp_ratings, tests, tests_fixies

ActionItem111: enabled access_control everywhere 


git-svn-id: https://svn.colivre.coop.br/svn/noosfero/trunk@739 3f533792-8f58-4932-b0fe-aaf55b0a4547
Showing 7 changed files with 8 additions and 8 deletions   Show diff stats
app/controllers/environment_admin/region_validators_controller.rb
  Diff comments   View file @cb2ab95
... ... @@ -2,6 +2,7 @@ class RegionValidatorsController < ApplicationController
2 2  
3 3 before_filter :load_region_and_search, :except => 'index'
4 4  
  5 + protect [:index, :region, :search, :add, :remove], 'manage_environment_validators', environment
5 6 def index
6 7 @regions = Region.top_level_for(environment)
7 8 end
... ...
app/controllers/profile_admin/cms_controller.rb
  Diff comments   View file @cb2ab95
... ... @@ -5,6 +5,5 @@ class CmsController < ComatoseAdminController
5 5  
6 6 define_option :page_class, Article
7 7  
8   - # not yet
9   - # protect [:edit, :new, :reorder, :delete], :post_content, :profile
  8 + protect [:edit, :new, :reorder, :delete], :post_content, :profile
10 9 end
... ...
app/controllers/profile_admin/membership_editor_controller.rb
  Diff comments   View file @cb2ab95
... ... @@ -4,7 +4,7 @@ class MembershipEditorController < ProfileAdminController
4 4  
5 5 needs_profile
6 6  
7   -# protect [:index, :new_enterprise, :create_enterprise ], 'edit_profile', profile
  7 + protect [:index, :new_enterprise, :create_enterprise ], 'edit_profile', profile
8 8  
9 9 def index
10 10 @memberships = current_user.person.memberships
... ...
app/controllers/profile_admin/profile_editor_controller.rb
  Diff comments   View file @cb2ab95
... ... @@ -3,8 +3,7 @@ class ProfileEditorController < ProfileAdminController
3 3  
4 4 design_editor :holder => 'profile', :autosave => true, :block_types => :block_types
5 5  
6   -# protect [:edit], 'edit_profile', profile
7   -# protect []
  6 + protect [:edit], 'edit_profile', profile
8 7  
9 8 def block_types
10 9 {
... ... @@ -15,7 +14,6 @@ class ProfileEditorController < ProfileAdminController
15 14 }
16 15 end
17 16  
18   -
19 17 # edits the profile info (posts back)
20 18 def edit
21 19 if request.post?
... ...
app/controllers/profile_admin/profile_members_controller.rb
  Diff comments   View file @cb2ab95
1 1 class ProfileMembersController < ProfileAdminController
2 2  
3   -# protect [:index, :change_roles, :update_roles, :change_role, :add_role, :remove_role, :unassociate], 'manage_memberships', profile
  3 + protect [:index, :change_roles, :update_roles, :change_role, :add_role, :remove_role, :unassociate], 'manage_memberships', profile
4 4  
5 5 def index
6 6 @members = profile.people.uniq
... ...
app/controllers/public/account_controller.rb
  Diff comments   View file @cb2ab95
... ... @@ -36,6 +36,8 @@ class AccountController &lt; PublicController
36 36 @user.person.environment = environment
37 37 @user.person.save!
38 38 self.current_user = @user
  39 + owner_role = Role.find_by_name('owner')
  40 + @user.person.affiliate(@user.person, [owner_role]) if owner_role
39 41 redirect_back_or_default(homepage_path(:profile => current_user.login))
40 42 flash[:notice] = _("Thanks for signing up!")
41 43 end
... ...
script/anhetegua
  Diff comments   View file @cb2ab95
... ... @@ -56,7 +56,7 @@ owner_role = Role.create!(:name =&gt; &#39;owner&#39;, :permissions =&gt; [&#39;edit_profile&#39;, &#39;de
56 56  
57 57 # root user of the system, admin_role for him, the assignment of the role for him and the ownership of the system homepage
58 58 root = User.create!(:login => 'root', :email => 'root@noosfero.org', :password => 'root', :password_confirmation => 'root').person
59   -admin_role = Role.create!(:name => 'admin', :permissions => ['edit_environment_features', 'edit_environment_design', 'manage_environment_categories', 'manage_environment_roles', 'manage_environment_validators'])
  59 +admin_role = Role.create!(:name => 'admin', :permissions => ['view_environment_admin_panel','edit_environment_features', 'edit_environment_design', 'manage_environment_categories', 'manage_environment_roles', 'manage_environment_validators'])
60 60 RoleAssignment.create!(:accessor => root, :role => admin_role, :resource => nil)
61 61 RoleAssignment.create!(:accessor => root, :role => owner_role, :resource => noosfero)
62 62  
... ...