Contents

Spree::BaseController.class_eval do

  # graceful error handling for cancan authorization exceptions
  rescue_from CanCan::AccessDenied do |exception|
    return unauthorized
  end

  private

  # Redirect as appropriate when an access request fails.  The default action is to redirect to the login screen.
  # Override this method in your controllers if you want to have special behavior in case the user is not authorized
  # to access the requested action.  For example, a popup window might simply close itself.
  def unauthorized
    respond_to do |format|
      format.html do
        if current_user
          flash.now[:error] = I18n.t(:authorization_failure)
          render 'shared/unauthorized', :layout => 'spree_application'
        else
          store_location
          redirect_to login_path and return
        end
      end
      format.xml do
        request_http_basic_authentication 'Web Password'
      end
      format.json do
        render :text => "Not Authorized \n", :status => 401
      end
    end
  end

  def store_location
    # disallow return to login, logout, signup pages
    disallowed_urls = [signup_url, login_url, destroy_user_session_path]
    disallowed_urls.map!{|url| url[/\/\w+$/]}
    unless disallowed_urls.include?(request.fullpath)
      session["user_return_to"] = request.fullpath
    end
  end

end

Version data entries

5 entries across 5 versions & 1 rubygems

Version	Path
spree_auth-0.40.4	app/controllers/spree/base_controller_decorator.rb
spree_auth-0.40.3	app/controllers/spree/base_controller_decorator.rb
spree_auth-0.40.2	app/controllers/spree/base_controller_decorator.rb
spree_auth-0.40.1	app/controllers/spree/base_controller_decorator.rb
spree_auth-0.40.0	app/controllers/spree/base_controller_decorator.rb