Contents

class UsersController < ApplicationController
  load_and_authorize_resource
  before_filter :signed_in_user, only: [:index, :edit, :update, :destroy]
  before_filter :correct_user,   only: [:edit, :update]
  before_filter :admin_user,     only: :destroy
  
  
  def index
    @users = User.paginate(page: params[:page])
  end
  
  def show
    @user = User.find(params[:id])
    @microposts = @user.microposts.paginate(page: params[:page])
  end

  def new
    @user = User.new
  end
  
  def create
    @user = User.new(params[:user])
    if @user.save
      sign_in @user
      flash[:success] = "Welcome to the Sample App!"
      redirect_to @user
    else
      render 'new'
    end
  end
  
  def update
    #@user = User.find(params[:id])
    if @user.update_attributes(params[:user])
      flash[:success] = "Profile updated"
      sign_in @user
      redirect_to @user
    else
      render 'edit'
    end
  end
  
  def destroy
    User.find(params[:id]).destroy
    flash[:success] = "User destroyed."
    redirect_to users_path
  end
    
    
  private

    def correct_user
      @user = User.find(params[:id])
      redirect_to(root_path) unless current_user.admin? || current_user.email == @user.email
    end

    def admin_user
      redirect_to(root_path) unless current_user.admin?
    end
  
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
guara-0.0.3	app/controllers/users_controller.rb
guara-0.0.1.rc	app/controllers/users_controller.rb