lib/bizside/acl/controller_helper.rb in bizside-3.0.0 vs lib/bizside/acl/controller_helper.rb in bizside-3.0.1
- old
+ new
@@ -2,12 +2,15 @@
module Acl
module ControllerHelper
include Bizside::Acl::AvailableHelper
def authorize_user!
- unless available_for(params[:controller], params[:action], params)
+ return if available_for(params[:controller], params[:action], params)
+
+ if request.xhr?
+ head :forbidden
+ else
redirect_to root_path
- return
end
end
end
end