Contents

module SiteControllerExtensions
  
  def self.included(base)
    base.class_eval {
      # NB. to control access without disabling the cache we have overridden Page.cache? 
      # to return false for any page that has a group association. 
      
      def find_page_with_group_check(url)
        page = find_page_without_group_check(url)
        raise ReaderGroup::PermissionDenied if page && !page.visible_to?(current_reader)
        page
      end
        
      def show_page_with_group_check
        show_page_without_group_check
      rescue ReaderGroup::PermissionDenied
        if current_reader
          flash[:error] = t("access_denied")
          redirect_to reader_permission_denied_url
        else
          flash[:explanation] = t("page_not_public")
          flash[:error] = t("please_log_in")
          store_location
          redirect_to reader_login_url
        end
      end
        
      alias_method_chain :find_page, :group_check
      alias_method_chain :show_page, :group_check
    }
  end
end

Version data entries

5 entries across 5 versions & 1 rubygems

Version	Path
radiant-reader_group-extension-1.2.4	lib/site_controller_extensions.rb
radiant-reader_group-extension-1.2.3	lib/site_controller_extensions.rb
radiant-reader_group-extension-1.2.2	lib/site_controller_extensions.rb
radiant-reader_group-extension-1.2.1	lib/site_controller_extensions.rb
radiant-reader_group-extension-1.2.0	lib/site_controller_extensions.rb