[myexperiment-hackers] [3650] branches/packs: tweaked resource authorization

[noreply]

Revision

3650

Author

dgc

Date

2013-09-01 14:43:50 +0000 (Sun, 01 Sep 2013)

Log Message

tweaked resource authorization

Modified Paths

• branches/packs/app/views/packs/_resource_tiles.html.erb
• branches/packs/lib/authorization.rb

Diff

Modified: branches/packs/app/views/packs/_resource_tiles.html.erb (3649 => 3650)

--- branches/packs/app/views/packs/_resource_tiles.html.erb	2013-09-01 13:32:51 UTC (rev 3649)
+++ branches/packs/app/views/packs/_resource_tiles.html.erb	2013-09-01 14:43:50 UTC (rev 3650)
@@ -9,6 +9,8 @@
   <% resources.each do |resource| %>
     <% ore_path = resource.ore_path %>
     <% next unless ore_path %>
-    <%= render :partial => "resource_tile", :locals => { :pack => pack, :resource => resource } -%>
+    <% if Authorization.check('view', resource, current_user) %>
+      <%= render :partial => "resource_tile", :locals => { :pack => pack, :resource => resource } -%>
+    <% end %>
   <% end %>
 </table>

Modified: branches/packs/lib/authorization.rb (3649 => 3650)

--- branches/packs/lib/authorization.rb	2013-09-01 13:32:51 UTC (rev 3649)
+++ branches/packs/lib/authorization.rb	2013-09-01 14:43:50 UTC (rev 3650)
@@ -397,7 +397,7 @@
               return Authorization.check('view', object.pack_contributable_entry, user)
             end
 
-            return false
+            return true
 
           when "create"