[PATCH conductor 1/3] few small additions enforcing Privilege::PERM_VIEW in application_controller

Mo Morsi mmorsi at redhat.com
Fri Jul 27 16:12:42 UTC 2012


---
 src/app/controllers/application_controller.rb |    3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/app/controllers/application_controller.rb b/src/app/controllers/application_controller.rb
index 477b7f4..b6381ff 100644
--- a/src/app/controllers/application_controller.rb
+++ b/src/app/controllers/application_controller.rb
@@ -313,6 +313,7 @@ class ApplicationController < ActionController::Base
 
   def add_permissions_inline(perm_obj, path_prefix = '', polymorphic_path_extras = {})
     @permission_object = perm_obj
+    require_privilege(Privilege::VIEW, @permission_object)
     @path_prefix = path_prefix
     @polymorphic_path_extras = polymorphic_path_extras
     @roles = Role.find_all_by_scope(@permission_object.class.name)
@@ -337,8 +338,8 @@ class ApplicationController < ActionController::Base
                   :count => perm_obj.permissions.count,
                   :pretty_view_toggle => 'disabled'}
       end
+      set_permissions_header
     end
-    set_permissions_header
   end
 
   def set_permissions_header
-- 
1.7.10.2




More information about the aeolus-devel mailing list