Blocks all access if user has not validated his account. Fixes CartoD…

…B/cartodb-central#678
CartoDB · Jun 24, 2015 · c72e4c2 · Kartones · Jun 24, 2015 · juanignaciosl
1 parent 8c3c5b6
commit c72e4c2
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
@@ -12,6 +12,7 @@ class ApplicationController < ActionController::Base
   before_filter :store_request_host
   before_filter :ensure_user_organization_valid
   before_filter :ensure_org_url_if_org_user
+  before_filter :ensure_account_has_been_activated
   before_filter :browser_is_html5_compliant?
   before_filter :allow_cross_domain_access
   before_filter :set_asset_debugging
@@ -197,6 +198,12 @@ def ensure_org_url_if_org_user
     end
   end
 
+  def ensure_account_has_been_activated
+    return unless current_user
+
+    redirect_to CartoDB.url(self, 'account_token_authentication_error') unless current_user.enable_account_token.nil?
+  end
+
   def add_revision_header
     response.headers['X-CartoDB-Rev'] = CartoDB::CARTODB_REV unless CartoDB::CARTODB_REV.nil?
   end

diff --git a/app/controllers/sessions_controller.rb b/app/controllers/sessions_controller.rb
@@ -11,6 +11,7 @@ class SessionsController < ApplicationController
   before_filter :load_organization
   # Don't force org urls
   skip_before_filter :ensure_org_url_if_org_user
+  skip_before_filter :ensure_account_has_been_activated, :only => :account_token_authentication_error
 
 
   def new