Contents

module Pbw
  class RolesController < ApplicationController
    respond_to :json

    before_filter :authenticate_user!
    before_filter :is_super_admin?

    def index
      @roles = Role.all.keep_if{|i| i.name != "Super Admin"}
      render json: @roles
    end

    def show
      @role = Role.find(params[:id])
      @permissions = @role.permissions
      render json: {role: @role, permissions: @permissions}
    end

    def edit
      @role = Role.find(params[:id])
      @permissions = Permission.all
      @role_permissions = @role.permissions.collect{|p| p.id}
      render json: {role: @role, permissions: @permissions, role_permissions: @role_permissions}
    end

    def update
      @role = Role.find(params[:id])
      @role.permissions = []
      @role.set_permissions(params[:permissions]) if params[:permissions]
      if @role.save
        render json: {notice: "Role updated"}
        return
      end
      render 'edit'
    end

    private

    def is_super_admin?
      unless current_user.super_admin?
        render json: {:error => "Access denied. You are not authorized to access the requested page."}, status: 401
        return false
      end
    end
  end
end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
pbw-0.0.6	app/controllers/pbw/roles_controller.rb
pbw-0.0.5	app/controllers/pbw/roles_controller.rb
pbw-0.0.4	app/controllers/pbw/roles_controller.rb
pbw-0.0.3	app/controllers/pbw/roles_controller.rb