chiu
/
personal_plugin_generator
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add permission checks

This commit is contained in:
rulingcom 2026-08-17 15:26:26 +08:00
parent 774a5ec062
commit 113a558158
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
app/controllers/admin/personal_plugin_fields_controller.rb
View File

@ -2,6 +2,7 @@ class Admin::PersonalPluginFieldsController < OrbitMemberController
require 'fileutils'
include Admin::PersonalPluginFieldsHelper
before_action :set_personal_plugin_field, only: [:show, :edit , :update, :destroy, :fields_setting, :update_fields_setting,:generate_plugin]
before_action :check_system_admin_rights
def index
@personal_plugin_fields = PersonalPluginField.order_by(:created_at=>'desc').page(params[:page]).per(10)
@ -948,6 +949,10 @@ class Admin::PersonalPluginFieldsController < OrbitMemberController
end
end
private
def check_system_admin_rights
user_has_rights = (current_user.is_admin? rescue false)
render_401 if !user_has_rights
end
def personal_plugin_field_params
personal_plugin_field_params = params.require(:personal_plugin_field).permit! rescue {}
if personal_plugin_field_params[:related_modal_name].nil?
@ -984,4 +989,4 @@ class Admin::PersonalPluginFieldsController < OrbitMemberController
%x(kill -s USR2 `cat tmp/pids/unicorn.pid`)
sleep 2
end
end
end