lib/perus/server/admin.rb in perus-0.1.20 vs lib/perus/server/admin.rb in perus-0.1.21

@@ -17,23 +17,26 @@
                         load_site_information
                     end
 
                     # list
                     get '/admin/#{plural}' do
+                        protected!
                         @records = #{klass}.dataset.order_by(:name).all
                         erb :'admin/index'
                     end
 
                     # new form
                     get '/admin/#{plural}/new' do
+                        protected!
                         @record = #{klass}.new
                         @form = Form.new(@record)
                         erb :'admin/new'
                     end
 
                     # create
                     post '/admin/#{plural}' do
+                        protected!
                         @record = #{klass}.new(params[:record])
                         if @record.valid?
                             begin
                                 @record.save
                                 if #{redirect_to_record}
@@ -50,17 +53,19 @@
                         erb :'admin/new'
                     end
 
                     # edit
                     get '/admin/#{plural}/:id' do
+                        protected!
                         @record = #{klass}.with_pk!(params['id'])
                         @form = Form.new(@record)
                         erb :'admin/edit'
                     end
 
                     # update
                     put '/admin/#{plural}/:id' do
+                        protected!
                         @record = #{klass}.with_pk!(params['id'])
                         if @record.valid?
                             begin
                                 @record.update(params[:record])
                                 redirect url_prefix + 'admin/#{plural}'
@@ -73,9 +78,10 @@
                         erb :'admin/edit'
                     end
 
                     # delete
                     delete '/admin/#{plural}/:id' do
+                        protected!
                         @record = #{klass}.with_pk!(params['id'])
                         @record.destroy
                         redirect url_prefix + 'admin/#{plural}'
                     end
                 }