perm check

zby · Feb 12, 2012 · f7e7317 · f7e7317
1 parent fdb30a8
commit f7e7317
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/lib/Nblog/Controller/User.pm b/lib/Nblog/Controller/User.pm
@@ -38,6 +38,9 @@ sub index_action {
 
 sub edit_action {
     my $self = shift;
+    if( !$self->env->{user} || !( $self->env->{user}->id == $self->user->id ) ){
+        return $self->app->renderer->render( template => \"You have no access to this part of the site", c => $self );
+    }
     my $params = $self->req->parameters->as_hashref_mixed;
     my $form = Nblog::Form::BaseUser->new(
         params => $params,

diff --git a/share/templates/User/index.tt b/share/templates/User/index.tt
@@ -10,4 +10,4 @@
 <div class="post-content">
     [% c.user.formatted_about_me %]
 </div>
-
+<a href="[% c.user.username %]/edit">Edit</a>