First version of app and object auth for web_resource module. Basic fund is ok. backend need to be secued

This commit is contained in:
Matthew K. Fu JuYuan committed 2012-05-15 18:55:16 +08:00
1 parent b23b5e8ec5
commit 3f744dab05
14 files changed
+53 -22

No files matched your search

+1 -3
View File
@@ -11,9 +11,7 @@ class ObjectAuth < PrototypeAuth
end
def check_user_has_app_auth
debugger
a=1
sub_managing_users = auth_obj.app_auth.sub_managing_users
sub_managing_users = auth_obj.app_auth.sub_managing_users rescue []
app_auth = auth_obj.app_auth
self.auth_users.each do |auth_user|
if !sub_managing_users.include? auth_user && !auth_user.admin?