Contents

module Commontator
  class ApplicationController < ActionController::Base
    before_filter :set_user, :ensure_user
    
    rescue_from SecurityTransgression, :with => lambda { head(:forbidden) }
    
    protected

    def security_transgression_unless(check)
      raise SecurityTransgression unless check
    end

    def set_user
      @user = Commontator.current_user_proc.call(self)
    end

    def ensure_user
      security_transgression_unless(@user && @user.is_commontator)
    end

    def set_thread
      @thread = params[:thread_id].blank? ? \
        Commontator::Thread.find(params[:id]) : \
        Commontator::Thread.find(params[:thread_id])
      security_transgression_unless @thread.can_be_read_by? @user
      commontator_set_new_comment(@thread, @user)
    end
  end
end

Version data entries

9 entries across 9 versions & 1 rubygems

Version	Path
commontator-4.11.1	app/controllers/commontator/application_controller.rb
commontator-4.11.0	app/controllers/commontator/application_controller.rb
commontator-4.10.5	app/controllers/commontator/application_controller.rb
commontator-4.10.4	app/controllers/commontator/application_controller.rb
commontator-4.10.3	app/controllers/commontator/application_controller.rb
commontator-4.10.2	app/controllers/commontator/application_controller.rb
commontator-4.10.1	app/controllers/commontator/application_controller.rb
commontator-4.10.0	app/controllers/commontator/application_controller.rb
commontator-4.9.0	app/controllers/commontator/application_controller.rb