Skip to content

Commit

Permalink
Fix authorization issues on impersonating
Browse files Browse the repository at this point in the history
  • Loading branch information
andrerpbts committed Sep 19, 2017
1 parent f579adc commit a488558
Show file tree
Hide file tree
Showing 4 changed files with 11 additions and 5 deletions.
4 changes: 2 additions & 2 deletions Gemfile
Original file line number Diff line number Diff line change
Expand Up @@ -28,9 +28,9 @@ gem 'foreman'
gem 'pundit'
gem 'rails-i18n'
gem 'rack-cors', require: 'rack/cors'
gem "recaptcha", require: "recaptcha/rails"
gem 'recaptcha', require: 'recaptcha/rails'
gem 'rgb_utils'
gem 'user_impersonate2', :require => 'user_impersonate'
gem 'user_impersonate2', require: 'user_impersonate'
gem 'central-support', git: 'https://github.com/Codeminer42/cm42-central-support.git', branch: 'master', require: 'central/support'

gem 'pg'
Expand Down
2 changes: 1 addition & 1 deletion app/views/layouts/application.html.erb
Original file line number Diff line number Diff line change
Expand Up @@ -103,7 +103,7 @@
<div class="main" id="main">
<div class="container<%= "-fluid board" if @layout_settings[:fluid] %>">
<%= render 'flash' %>
<% if current_admin_user %>
<% if current_staff_user %>
<%= render 'user_impersonate/header' %>
<% end %>
<%= yield %>
Expand Down
6 changes: 6 additions & 0 deletions config/initializers/user_impersonate.rb
Original file line number Diff line number Diff line change
Expand Up @@ -37,4 +37,10 @@ class Engine < Rails::Engine
# For Active Admin "AdminUser" model, use 'current_admin_user'
config.current_staff = 'current_admin_user'
end

ImpersonateController.class_eval do
# Ignore user authentication and Pundit authorization
skip_before_filter :authenticate_user!
skip_after_filter :verify_authorized
end
end
4 changes: 2 additions & 2 deletions config/routes.rb
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
require 'sidekiq/web'
Rails.application.routes.draw do

mount UserImpersonate::Engine => "/impersonate", as: "impersonate_engine"
devise_for :admin_users, ActiveAdmin::Devise.config
ActiveAdmin.routes(self)

mount UserImpersonate::Engine => "/impersonate", as: "impersonate_engine"

namespace :manage do
resources :projects do
resources :ownerships
Expand Down

0 comments on commit a488558

Please sign in to comment.