Fix for authorization

Dashboard and page authorisation
This commit is contained in:
chris committed 2013-08-23 12:08:33 +08:00
1 parent 399dfad392
commit 45e987d6f5
3 files changed
+4 -12

No files matched your search

+2 -4
View File
@@ -202,6 +202,8 @@ module OrbitCoreLib
module InstanceMethods
protected
def can_use
setup_vars
set_current_user
if @user_type
@user_type.each do |user_type|
open = false
@@ -220,14 +222,10 @@ module OrbitCoreLib
visitor ||= true
end
check_backend_openness if visitor
setup_vars
set_current_user
authenticate_user! unless visitor
redirect_to root_url unless open
end
else
setup_vars
set_current_user
authenticate_user!
check_user_can_use
end