README @@ -1,4 +1,7 @@ class AlarmsController < ApplicationController + + before_filter :admin?, :except => [:index] + def index @service_alarms = Alarm.paginate :page => params[:page], :order => "alarms.timestamp DESC", :conditions => "alarm_type = 2", :select => "alarms.id, alarms.timestamp, alarms.status, alarms.ms, services.name AS servicename", app/controllers/alarms_controller.rb @@ -29,7 +29,7 @@ class ApplicationController < ActionController::Base helper_method :buildUserLink - before_filter :login_required, :admin? + before_filter :login_required # See ActionController::RequestForgeryProtection for details # Uncomment the :secret if you're not using the cookie session store @@ -151,10 +151,10 @@ class ApplicationController < ActionController::Base #A method to block the admin pages to non-admin users def admin? - admin_controllers = %w{logmessages vitals setup} - admin_actions = %w{delete new} + #admin_controllers = %w{logmessages vitals setup} + #admin_actions = %w{delete new} user = current_user - if user != nil and !user.admin and admin_controllers.include?(params[:controller]) + if user != nil and !user.admin flash[:error] = "You must be admin to peform this action" redirect_back_or_default('/') end app/controllers/application.rb @@ -1,4 +1,7 @@ class BlacklistController < ApplicationController + + before_filter :admin?, :except => [:index] + def index @blacklisted_hosts = BlacklistedHost.find :all end app/controllers/blacklist_controller.rb @@ -17,6 +17,8 @@ class DowntimesController < ApplicationController + before_filter :admin?, :except => [:index] + def index @downtimes = Downtime.find(:all) end app/controllers/downtimes_controller.rb @@ -16,6 +16,9 @@ # along with ScopePort (Web Interface). If not, see <http://www.gnu.org/licenses/>. class HostgroupsController < ApplicationController + + before_filter :admin?, :except => [:index, :show] + def index @hostgroups = Hostgroup.find :all @newGroup = Hostgroup.new app/controllers/hostgroups_controller.rb @@ -16,6 +16,9 @@ # along with ScopePort (Web Interface). If not, see <http://www.gnu.org/licenses/>. class HostsController < ApplicationController + + before_filter :admin? + def new @host = Host.new @hostgroups = Hostgroup.find(:all) app/controllers/hosts_controller.rb @@ -16,6 +16,9 @@ # along with ScopePort (Web Interface). If not, see <http://www.gnu.org/licenses/>. class LogmessagesController < ApplicationController + + before_filter :admin? + def index @headline = "Log" @logmessages = Logmessage.paginate :page => params[:page], :order => 'logtime DESC' app/controllers/logmessages_controller.rb @@ -17,6 +17,8 @@ class NotificationgroupsController < ApplicationController + before_filter :admin?, :except => [:index. :show] + def index @groups = Notificationgroupdetail.find :all @counts = Notificationgroup.count :conditions => "deleted = 0", :group => "warninggroup" app/controllers/notificationgroups_controller.rb @@ -16,6 +16,9 @@ # along with ScopePort (Web Interface). If not, see <http://www.gnu.org/licenses/>. class OverviewController < ApplicationController + + before_filter :admin?, :except => [:index] + def index @headline = "Overview" end app/controllers/overview_controller.rb @@ -1,4 +1,7 @@ class ServicesController < ApplicationController + + before_filter :admin?, :except => [:index, :show, :show_graph, :show_ms, :store_comment] + def index @services = Service.find_all_by_disabled 0 @serviceCount = @services.size app/controllers/services_controller.rb app/controllers/sessions_controller.rb @@ -16,10 +16,9 @@ # along with ScopePort (Web Interface). If not, see <http://www.gnu.org/licenses/>. class SettingsController < ApplicationController - -# auto-incrematation is working even when the table is empty -# better solution ? - + + before_filter :admin? + def index @notigroups = Notificationgroupdetail.find(:all).collect {|p| [p.name, p.id] } @notigroups << ["None", "0"] app/controllers/settings_controller.rb @@ -16,6 +16,9 @@ # along with ScopePort (Web Interface). If not, see <http://www.gnu.org/licenses/>. class SetupController < ApplicationController + + before_filter :admin? + def index end end app/controllers/setup_controller.rb @@ -1,4 +1,7 @@ class UsersController < ApplicationController + + before_filter :admin?, :except => [:index, :delete, :edit, :settings] + # Allow to create a first admin user. skip_before_filter :login_required, :only => [:new, :create] if User.find(:all).size == 0 app/controllers/users_controller.rb @@ -16,6 +16,9 @@ # along with ScopePort (Web Interface). If not, see <http://www.gnu.org/licenses/>. class VitalsController < ApplicationController + + before_filter :admin? + def index @database_sizes = Vital.find(:last, :select => "dbtotalsize, dbsensorsize, dbservicesize", :order => "timestamp", app/controllers/vitals_controller.rb app/helpers/alarms_helper.rb app/helpers/blacklist_helper.rb app/helpers/downtimes_helper.rb app/helpers/hostgroups_helper.rb app/helpers/hosts_helper.rb app/helpers/logmessages_helper.rb app/helpers/notificationgroups_helper.rb app/helpers/services_helper.rb app/helpers/sessions_helper.rb app/helpers/settings_helper.rb app/helpers/setup_helper.rb app/helpers/users_helper.rb app/helpers/vitals_helper.rb app/models/alarm.rb app/models/blacklisted_host.rb app/models/department.rb app/models/downtime.rb app/models/host.rb app/models/hostgroup.rb app/models/logmessage.rb app/models/notificationgroup.rb app/models/notificationgroupdetail.rb app/models/service.rb app/models/servicecomment.rb app/models/servicerecord.rb app/models/setting.rb app/models/user.rb app/models/vital.rb app/views/alarms/index.html.erb app/views/alarms/showservicealarm.html.erb app/views/blacklist/index.html.erb app/views/downtimes/index.html.erb app/views/downtimes/show.html.erb app/views/hostgroups/index.html.erb app/views/hostgroups/show.html.erb app/views/hosts/new.html.erb app/views/logmessages/index.html.erb app/views/notificationgroups/index.html.erb app/views/notificationgroups/show.html.erb app/views/services/edit.html.erb app/views/services/index.html.erb app/views/services/new.html.erb app/views/services/show.html.erb app/views/sessions/new.html.erb app/views/setup/index.html.erb app/views/users/edit.html.erb app/views/users/index.html.erb app/views/users/new.html.erb app/views/users/settings.html.erb app/views/vitals/index.html.erb config/.gitignore config/database.yml.sample config/initializers/site_keys.rb db/.gitignore db/migrate/20081108212511_create_alarms.rb db/migrate/20081108222006_create_downtimes.rb db/migrate/20081108222426_create_emergencies.rb db/migrate/20081108222655_create_emergencynotifications.rb db/migrate/20081108232749_create_hosts.rb db/migrate/20081108233346_create_lastsensordata.rb db/migrate/20081108233554_create_logmessages.rb db/migrate/20081108233849_create_notificationgroups.rb db/migrate/20081108234359_create_sensordata.rb db/migrate/20081108235359_create_sensors.rb db/migrate/20081109000336_create_sensor_conditions.rb db/migrate/20081109001523_create_servicedata.rb db/migrate/20081109010134_create_settings.rb db/migrate/20081110151309_create_vitals.rb db/migrate/20081112113630_notificationgroupdetails.rb db/migrate/20081114133521_hostgroups.rb db/migrate/20081115152126_services.rb db/migrate/20081121233010_blacklisted_hosts.rb db/migrate/20081126190813_users.rb db/migrate/20081218212552_create_users.rb db/migrate/20090203105910_create_servicecomments.rb db/migrate/20090203161317_add_title_to_servicecomments.rb db/migrate/20090206204406_add_user_columns.rb db/migrate/20090206210633_create_departments.rb db/migrate/20090206213147_change_user_admin_null.rb db/migrate/20090208133141_add_allow_gravatar_to_settings.rb db/migrate/20090208191851_add_use_gravatar_to_users.rb db/migrate/20090208201136_add_gravatar_email_address_to_users.rb lib/authenticated_system.rb lib/authenticated_test_helper.rb public/images/ajax-loader.gif public/images/ajax-loader2.gif public/images/errorbg-blink.gif public/images/eyeonboxes.png public/images/graphs/.gitignore public/images/icons/arrow_down.png public/images/icons/arrow_up.png public/images/icons/comment.png public/images/icons/delete.png public/images/icons/email.png public/images/icons/error.png public/images/icons/mobilec.png public/images/icons/okay.png public/images/icons/warning.png public/images/icons/xmpp.png public/javascripts/scopeport-forms.js public/javascripts/scopeport.js test/fixtures/departments.yml test/fixtures/downtimes.yml test/fixtures/logmessages.yml test/fixtures/servicecomments.yml test/fixtures/settings.yml test/fixtures/users.yml test/fixtures/vitals.yml test/functional/alarms_controller_test.rb test/functional/blacklist_controller_test.rb test/functional/downtimes_controller_test.rb test/functional/hostgroups_controller_test.rb test/functional/hosts_controller_test.rb test/functional/logmessages_controller_test.rb test/functional/notificationgroups_controller_test.rb test/functional/services_controller_test.rb test/functional/settings_controller_test.rb test/functional/setup_controller_test.rb test/functional/system_controller_test.rb test/functional/systems_controller_test.rb test/functional/users_controller_test.rb test/functional/vitals_controller_test.rb test/unit/department_test.rb test/unit/downtime_test.rb test/unit/logmessage_test.rb test/unit/servicecomment_test.rb test/unit/setting_test.rb test/unit/user_test.rb test/unit/vital_test.rb vendor/plugins/colored/MIT-LICENSE vendor/plugins/colored/README vendor/plugins/colored/Rakefile vendor/plugins/colored/init.rb vendor/plugins/colored/install.rb vendor/plugins/colored/lib/colored.rb vendor/plugins/colored/lib/colored/core_ext.rb vendor/plugins/colored/lib/colored/helpers.rb vendor/plugins/colored/tasks/colored_tasks.rake vendor/plugins/colored/test/colored_test.rb vendor/plugins/colored/uninstall.rb vendor/plugins/restful_authentication/CHANGELOG vendor/plugins/restful_authentication/README.textile vendor/plugins/restful_authentication/Rakefile vendor/plugins/restful_authentication/TODO vendor/plugins/restful_authentication/generators/authenticated/USAGE vendor/plugins/restful_authentication/generators/authenticated/authenticated_generator.rb vendor/plugins/restful_authentication/generators/authenticated/lib/insert_routes.rb vendor/plugins/restful_authentication/generators/authenticated/templates/_model_partial.html.erb vendor/plugins/restful_authentication/generators/authenticated/templates/activation.erb vendor/plugins/restful_authentication/generators/authenticated/templates/authenticated_system.rb vendor/plugins/restful_authentication/generators/authenticated/templates/authenticated_test_helper.rb vendor/plugins/restful_authentication/generators/authenticated/templates/controller.rb vendor/plugins/restful_authentication/generators/authenticated/templates/helper.rb vendor/plugins/restful_authentication/generators/authenticated/templates/login.html.erb vendor/plugins/restful_authentication/generators/authenticated/templates/mailer.rb vendor/plugins/restful_authentication/generators/authenticated/templates/migration.rb vendor/plugins/restful_authentication/generators/authenticated/templates/model.rb vendor/plugins/restful_authentication/generators/authenticated/templates/model_controller.rb vendor/plugins/restful_authentication/generators/authenticated/templates/model_helper.rb vendor/plugins/restful_authentication/generators/authenticated/templates/model_helper_spec.rb vendor/plugins/restful_authentication/generators/authenticated/templates/observer.rb vendor/plugins/restful_authentication/generators/authenticated/templates/signup.html.erb vendor/plugins/restful_authentication/generators/authenticated/templates/signup_notification.erb vendor/plugins/restful_authentication/generators/authenticated/templates/site_keys.rb vendor/plugins/restful_authentication/generators/authenticated/templates/spec/controllers/access_control_spec.rb vendor/plugins/restful_authentication/generators/authenticated/templates/spec/controllers/authenticated_system_spec.rb vendor/plugins/restful_authentication/generators/authenticated/templates/spec/controllers/sessions_controller_spec.rb vendor/plugins/restful_authentication/generators/authenticated/templates/spec/controllers/users_controller_spec.rb vendor/plugins/restful_authentication/generators/authenticated/templates/spec/fixtures/users.yml vendor/plugins/restful_authentication/generators/authenticated/templates/spec/helpers/users_helper_spec.rb vendor/plugins/restful_authentication/generators/authenticated/templates/spec/models/user_spec.rb vendor/plugins/restful_authentication/generators/authenticated/templates/stories/rest_auth_stories_helper.rb vendor/plugins/restful_authentication/generators/authenticated/templates/stories/steps/ra_navigation_steps.rb vendor/plugins/restful_authentication/generators/authenticated/templates/stories/steps/ra_resource_steps.rb vendor/plugins/restful_authentication/generators/authenticated/templates/stories/steps/ra_response_steps.rb vendor/plugins/restful_authentication/generators/authenticated/templates/stories/steps/user_steps.rb vendor/plugins/restful_authentication/generators/authenticated/templates/stories/users/accounts.story vendor/plugins/restful_authentication/generators/authenticated/templates/stories/users/sessions.story vendor/plugins/restful_authentication/generators/authenticated/templates/test/functional_test.rb vendor/plugins/restful_authentication/generators/authenticated/templates/test/mailer_test.rb vendor/plugins/restful_authentication/generators/authenticated/templates/test/model_functional_test.rb vendor/plugins/restful_authentication/generators/authenticated/templates/test/unit_test.rb vendor/plugins/restful_authentication/init.rb vendor/plugins/restful_authentication/install.rb vendor/plugins/restful_authentication/lib/authentication.rb vendor/plugins/restful_authentication/lib/authentication/by_cookie_token.rb vendor/plugins/restful_authentication/lib/authentication/by_password.rb vendor/plugins/restful_authentication/lib/authorization.rb vendor/plugins/restful_authentication/lib/authorization/aasm_roles.rb vendor/plugins/restful_authentication/lib/authorization/stateful_roles.rb vendor/plugins/restful_authentication/lib/trustification.rb vendor/plugins/restful_authentication/lib/trustification/email_validation.rb vendor/plugins/restful_authentication/notes/AccessControl.txt vendor/plugins/restful_authentication/notes/Authentication.txt vendor/plugins/restful_authentication/notes/Authorization.txt vendor/plugins/restful_authentication/notes/RailsPlugins.txt vendor/plugins/restful_authentication/notes/SecurityFramework.graffle vendor/plugins/restful_authentication/notes/SecurityFramework.png vendor/plugins/restful_authentication/notes/SecurityPatterns.txt vendor/plugins/restful_authentication/notes/Tradeoffs.txt vendor/plugins/restful_authentication/notes/Trustification.txt vendor/plugins/restful_authentication/rails/init.rb vendor/plugins/restful_authentication/restful-authentication.gemspec vendor/plugins/restful_authentication/tasks/auth.rake vendor/plugins/will_paginate/.gitignore vendor/plugins/will_paginate/.manifest vendor/plugins/will_paginate/CHANGELOG.rdoc vendor/plugins/will_paginate/LICENSE vendor/plugins/will_paginate/README.rdoc vendor/plugins/will_paginate/Rakefile vendor/plugins/will_paginate/examples/apple-circle.gif vendor/plugins/will_paginate/examples/index.haml vendor/plugins/will_paginate/examples/index.html vendor/plugins/will_paginate/examples/pagination.css vendor/plugins/will_paginate/examples/pagination.sass vendor/plugins/will_paginate/init.rb vendor/plugins/will_paginate/lib/will_paginate.rb vendor/plugins/will_paginate/lib/will_paginate/array.rb vendor/plugins/will_paginate/lib/will_paginate/collection.rb vendor/plugins/will_paginate/lib/will_paginate/core_ext.rb vendor/plugins/will_paginate/lib/will_paginate/finder.rb vendor/plugins/will_paginate/lib/will_paginate/named_scope.rb vendor/plugins/will_paginate/lib/will_paginate/named_scope_patch.rb vendor/plugins/will_paginate/lib/will_paginate/version.rb vendor/plugins/will_paginate/lib/will_paginate/view_helpers.rb vendor/plugins/will_paginate/test/boot.rb vendor/plugins/will_paginate/test/collection_test.rb vendor/plugins/will_paginate/test/console vendor/plugins/will_paginate/test/database.yml vendor/plugins/will_paginate/test/finder_test.rb vendor/plugins/will_paginate/test/fixtures/admin.rb vendor/plugins/will_paginate/test/fixtures/developer.rb vendor/plugins/will_paginate/test/fixtures/developers_projects.yml vendor/plugins/will_paginate/test/fixtures/project.rb vendor/plugins/will_paginate/test/fixtures/projects.yml vendor/plugins/will_paginate/test/fixtures/replies.yml vendor/plugins/will_paginate/test/fixtures/reply.rb vendor/plugins/will_paginate/test/fixtures/schema.rb vendor/plugins/will_paginate/test/fixtures/topic.rb vendor/plugins/will_paginate/test/fixtures/topics.yml vendor/plugins/will_paginate/test/fixtures/user.rb vendor/plugins/will_paginate/test/fixtures/users.yml vendor/plugins/will_paginate/test/helper.rb vendor/plugins/will_paginate/test/lib/activerecord_test_case.rb vendor/plugins/will_paginate/test/lib/activerecord_test_connector.rb vendor/plugins/will_paginate/test/lib/load_fixtures.rb vendor/plugins/will_paginate/test/lib/view_test_process.rb vendor/plugins/will_paginate/test/tasks.rake vendor/plugins/will_paginate/test/view_test.rb vendor/plugins/will_paginate/will_paginate.gemspec 472f3bdc72f3d21c7a10bc4e5d9afedd3744da48 ernestorocha ernestorrocha@gmail.com http://github.com/lennartkoopmann/scopeport-web-interface/commit/05614b75d28192a168df2f61bf240c7362f05d51 05614b75d28192a168df2f61bf240c7362f05d51 2009-02-15T16:10:49-08:00 2009-02-15T16:10:49-08:00 Added the before_filter to the controllers (authorization) a18bdeb71b87088e9c3e17d03d6e08237d6903d8 ernestorocha ernestorrocha@gmail.com