cafe-grader-web Commit - r104:7a05c208f2ec

cafe-grader-web

Commit `r104:7a05c208f2ec` public

parent | child

Description:

[web] improved log-in & roles efficiency git-svn-id: http://theory.cpe.ku.ac.th/grader/web/trunk@196 6386c4cd-e34a-4fa8-8920-d93eb39b512e

Commit status:

[Not Reviewed]

References:

default

Diff options:

| | | |

Comments:

0 Commit comments 0 Inline Comments

Unresolved TODOs:

There are no unresolved TODOs

Add another comment

r104:7a05c208f2ec - Sat, 26 Apr 2008 09:00:25 - 6 files changed: 23 inserted, 10 deleted

app/controllers/announcements_controller.rb ¶ +1 -2

               class AnnouncementsController < ApplicationController
-            -   before_filter :authenticate
+            +   before_filter :admin_authorization
-            -   before_filter { |controller| controller.authorization_by_roles(['admin'])}
                 in_place_edit_for :announcement, :published
                 # GET /announcements
                 # GET /announcements.xml
                 def index

app/controllers/application.rb ¶ +8 -1

               class ApplicationController < ActionController::Base
                 # Pick a unique cookie name to distinguish our session data from others'
                 session :session_key => '_grader_session_id'
                 SINGLE_USER_MODE_CONF_KEY = 'system.single_user_mode'
+            +   def admin_authorization
+            +     return false unless authenticate
+            +     user = User.find(session[:user_id], :include => ['roles'])
+            +     redirect_to :controller => 'main', :action => 'login' unless user.admin?
+            +   end
+            +
                 def authorization_by_roles(allowed_roles)
                   return false unless authenticate
                   user = User.find(session[:user_id])
                   unless user.roles.detect { |role| allowed_roles.member?(role.name) }
                     flash[:notice] = 'You are not authorized to view the page you requested'
                     redirect_to :controller => 'main', :action => 'login'
                     return false
                   end
                 end
                 protected
+            +
                 def authenticate
                   unless session[:user_id]
                     redirect_to :controller => 'main', :action => 'login'
                     return false
                   end
-            -     Configuration.reload
+            +     #Configuration.reload
                   # check if run in single user mode
                   if (Configuration[SINGLE_USER_MODE_CONF_KEY])
                     user = User.find(session[:user_id])
                     if user==nil or user.login != 'root'
                       redirect_to :controller => 'main', :action => 'login'
                       return false

app/controllers/login_controller.rb ¶ +5

                 end
                 def login
                   if user = User.authenticate(params[:login], params[:password])
                     session[:user_id] = user.id
                     redirect_to :controller => 'main', :action => 'list'
+            +       if user.admin?
+            +         session[:admin] = true
+            +       else
+            +         session[:admin] = false
+            +       end
                   else
                     flash[:notice] = 'Wrong password'
                     redirect_to :controller => 'main', :action => 'login'
                   end
                 end

app/controllers/messages_controller.rb ¶ +1 -3

                 before_filter :authenticate
                 verify :method => :post, :only => ['create'],
                        :redirect_to => { :action => 'list' }
-            -   before_filter :only => ['console','show'] do |controller|
+            +   before_filter :admin_authorization, :only => ['console','show','reply']
-            -     controller.authorization_by_roles(['admin'])
-            -   end
                 def list
                   @user = User.find(session[:user_id])
                   @messages = Message.find_all_sent_by_user(@user)
                 end

app/helpers/application_helper.rb ¶ +1 -1

               module ApplicationHelper
                 def user_header
                   menu_items = ''
                   user = User.find(session[:user_id])
-            -     if (user!=nil) and (user.admin?)
+            +     if (user!=nil) and (session[:admin])
                     # admin menu
                     menu_items << "<b>Administrative task:</b> "
                     append_to menu_items, '[Announcements]', 'announcements', 'index'
                     append_to menu_items, '[Msg console]', 'messages', 'console'
                     append_to menu_items, '[Problem admin]', 'problems', 'index'
                     append_to menu_items, '[User admin]', 'user_admin', 'index'

app/views/configurations/index.html.haml ¶ +7 -3

                     %td
                       = in_place_editor_field :configuration, :value_type, {}, :rows=>1
                     %td
                       = in_place_editor_field :configuration, :value, {}, :rows=>1
               %br/
-            - = link_to '[Reload configuration]', :action => 'reload'
+            + Your config is saved, but it does not automatically take effect.
               %br/
-            - Your config is saved, but it does not automatically take effect.
+            + If you have one mongrel process running, you can
-            - You must reload.
+            + = link_to '[click]', :action => 'reload'
+            + here to reload.
+            + %br/
+            + If you have more than one process running, you should restart
+            + them manually.

Write
Preview

You need to be logged in to leave comments. Login now

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository permissions settings

Sign in to your account

Author

r104:7a05c208f2ec - Sat, 26 Apr 2008 09:00:25 - 6 files changed: 23 inserted, 10 deleted

Sign in to your account

Commit r104:7a05c208f2ec public

Author

r104:7a05c208f2ec - Sat, 26 Apr 2008 09:00:25 - 6 files changed: 23 inserted, 10 deleted

Commit `r104:7a05c208f2ec` public