Download as
Browse Code »

Commit e035ee75310410abca3db9fd51fecf2de03954da

Authored by MoisesMachado
1 parent d4a24e85
Exists in master and in 28 other branches 1.2+SPB2, 2_split_by_role, add_fields_in_api, api_fixies, api_pagination, api_private_token, api_tasks, article_hit_count, blog_page_bug, checkbox_to_user_can_edit_page, communities_ratings, communities_ratings_moderation, community_ratings_rebase, fix_cloned_article_parent, fix_gallery_image_url, fix_javascript_categories, fix_optional_fields, fix_suggest_article, fix_user_email_validation, highlight_block_fix, notification_plugin, notification_plugin_rebase, script_to_update, split_by_role, stable, temp_ratings, tests, tests_fixies

ActionItem85: applied the permission check to the cms controller 

git-svn-id: https://svn.colivre.coop.br/svn/noosfero/trunk@765 3f533792-8f58-4932-b0fe-aaf55b0a4547
Showing 1 changed file with 8 additions and 2 deletions   Show diff stats
app/controllers/profile_admin/cms_controller.rb
  Diff comments   View file @e035ee7
1 class CmsController < ComatoseAdminController 1 class CmsController < ComatoseAdminController
2 extend PermissionCheck 2 extend PermissionCheck
3 - 3 +
4 ApplicationController.needs_profile 4 ApplicationController.needs_profile
5 5
6 define_option :page_class, Article 6 define_option :page_class, Article
7 7
8 -# protect [:edit, :new, :reorder, :delete], :post_content, :profile 8 + protect [:edit, :new, :reorder, :delete], 'post_content', :profile
  9 +
  10 + protected
  11 +
  12 + def profile
  13 + Profile.find_by_identifier(params[:profile])
  14 + end
9 end 15 end