# File lib/action_controller/authentic_application.rb, line 127
      def access_denied
        respond_to do |format|
          format.html do
            store_location
            flash[:error] = I18n.t('muck.users.access_denied')
            redirect_to login_path
          end
          format.xml do
            request_http_basic_authentication 'Web Password'
          end
        end
      end

# File lib/action_controller/authentic_application.rb, line 61
      def admin?
        logged_in? && current_user.admin?
      end

# File lib/action_controller/authentic_application.rb, line 91
      def allowed_access?(options)
        if !options[:owner].nil? && !options[:object_user_id].nil?
          return true if is_owner?(options[:owner], options[:object_user_id])
        end

        options[:permit_roles].each do |role|
          return true if current_user.has_role?(role)
        end

        # access denied
        permission_denied
        false 
      end

# File lib/action_controller/authentic_application.rb, line 105
      def can_access?(user, object, roles, &block)
        if logged_in? && user.is_in_role?(event, roles)
          content = capture(&block)
          concat(content, block.binding)
        end
      end

# File lib/action_controller/authentic_application.rb, line 50
      def check_role(role)
        unless logged_in? && current_user.has_role?(role)
          if logged_in?
            permission_denied
          else
            store_referer
            access_denied
          end
        end
      end

# File lib/action_controller/authentic_application.rb, line 29
      def current_user
        return @current_user if defined?(@current_user)
        @current_user = current_user_session && current_user_session.record
      end

# File lib/action_controller/authentic_application.rb, line 24
      def current_user_session
        return @current_user_session if defined?(@current_user_session)
        @current_user_session = UserSession.find
      end

# File lib/action_controller/authentic_application.rb, line 171
      def enforce_logout_required
        respond_to do |format|
          format.html do
            redirect_to current_user
          end
        end
      end

# File lib/action_controller/authentic_application.rb, line 75
      def is_me?(user)
        user == current_user
      end

# File lib/action_controller/authentic_application.rb, line 112
      def is_mine?(user, &block)
        if logged_in? && (current_user.id == user.id)
          content = capture(&block)
          concat(content, block.binding)
        end 
      end

# File lib/action_controller/authentic_application.rb, line 66
      def is_owner?(obj)
        obj.user_id == current_user.id
      end

# File lib/action_controller/authentic_application.rb, line 70
      def is_owner?(user, user_id)
        user.id == user_id
      end

# File lib/action_controller/authentic_application.rb, line 20
      def logged_in?
        !current_user.blank?
      end

# File lib/action_controller/authentic_application.rb, line 34
      def login_required
        unless logged_in?
          store_location
          flash[:notice] = I18n.t('muck.users.login_requred')
          access_denied
        end
      end

# File lib/action_controller/authentic_application.rb, line 42
      def not_logged_in_required
        if logged_in?
          store_location
          flash[:notice] = t('muck.users.logout_required')
          enforce_logout_required
        end
      end

# File lib/action_controller/authentic_application.rb, line 140
      def permission_denied      
        respond_to do |format|
          format.html do
            #Put your domain name here ex. http://www.example.com
            domain_name = GlobalConfig.application_base_url
            http_referer = session[:refer_to]
            if http_referer.nil?
              store_referer
              http_referer = ( session[:refer_to] || domain_name )
            end
            flash[:error] = I18n.t('muck.users.permission_denied')
            #The [0..20] represents the 21 characters in http://localhost:3000
            #You have to set that to the number of characters in your domain name
            if http_referer[0..domain_name.length] != domain_name  
              session[:refer_to] = nil
              redirect_to root_path
            else
              redirect_to_referer_or_default(root_path)  
            end
          end
          format.xml do
            headers["Status"]           = "Unauthorized"
            headers["WWW-Authenticate"] = %(Basic realm="Web Password")
            render :text => I18n.t('muck.users.permission_denied'), :status => '401 Unauthorized'
          end
          format.js do
            render :text => I18n.t('muck.users.permission_denied')
          end
        end
      end

# File lib/action_controller/authentic_application.rb, line 81
      def protect_owner(obj)
        if is_owner?(obj) || admin?
          true
        else
          permission_denied
          false
        end
      end

# File lib/action_controller/authentic_application.rb, line 194
      def redirect_back_or_default(default)
        redirect_to(session[:return_to] || default)
        session[:return_to] = nil
      end

# File lib/action_controller/authentic_application.rb, line 199
      def redirect_to_referer_or_default(default)
        redirect_to(session[:refer_to] || default)
        session[:refer_to] = nil
      end

# File lib/action_controller/authentic_application.rb, line 182
      def store_location
        if request.format == :html
          session[:return_to] = request.request_uri
        end
      end

# File lib/action_controller/authentic_application.rb, line 188
      def store_referer
        session[:refer_to] = request.env["HTTP_REFERER"]
      end