Contents

class UsersController < Spree::BaseController
  
  before_filter :login_required, :except => [:new, :create]
  before_filter :initialize_extension_partials
  before_filter :can_only_edit_self, :only => [:edit, :update, :show]
  
  resource_controller

  create.after do   
    self.current_user = @user       
  end

  create.response do |wants|  
    wants.html { redirect_back_or_default(products_path) }         
  end
  
  protected
  
  def can_only_edit_self
    access_denied unless current_user.id == params[:id].to_i || current_user.has_role?("admin")
  end
  
end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
spree-0.4.1	app/controllers/users_controller.rb
spree-0.4.0	app/controllers/users_controller.rb
spree-0.5.0	app/controllers/users_controller.rb
spree-0.5.1	app/controllers/users_controller.rb