chiu
/
personal_plugin_generator
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add permission checks

This commit is contained in:
rulingcom 2026-08-17 15:26:26 +08:00
parent 774a5ec062
commit 113a558158
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/controllers/admin/personal_plugin_fields_controller.rb
View File

@ -2,6 +2,7 @@ class Admin::PersonalPluginFieldsController < OrbitMemberController
require 'fileutils' require 'fileutils'
include Admin::PersonalPluginFieldsHelper include Admin::PersonalPluginFieldsHelper
before_action :set_personal_plugin_field, only: [:show, :edit , :update, :destroy, :fields_setting, :update_fields_setting,:generate_plugin] before_action :set_personal_plugin_field, only: [:show, :edit , :update, :destroy, :fields_setting, :update_fields_setting,:generate_plugin]
before_action :check_system_admin_rights
def index def index
@personal_plugin_fields = PersonalPluginField.order_by(:created_at=>'desc').page(params[:page]).per(10) @personal_plugin_fields = PersonalPluginField.order_by(:created_at=>'desc').page(params[:page]).per(10)
@ -948,6 +949,10 @@ class Admin::PersonalPluginFieldsController < OrbitMemberController
end end
end end
private private
def check_system_admin_rights
user_has_rights = (current_user.is_admin? rescue false)
render_401 if !user_has_rights
end
def personal_plugin_field_params def personal_plugin_field_params
personal_plugin_field_params = params.require(:personal_plugin_field).permit! rescue {} personal_plugin_field_params = params.require(:personal_plugin_field).permit! rescue {}
if personal_plugin_field_params[:related_modal_name].nil? if personal_plugin_field_params[:related_modal_name].nil?