Browse Source

Prevent guests from accessing custom wizards

Angus McLeod 7 years ago
parent
commit
760c67bb6f
1 changed files with 4 additions and 0 deletions
  1. 4 0
      controllers/wizard.rb

+ 4 - 0
controllers/wizard.rb

@@ -1,6 +1,10 @@
 class CustomWizard::WizardController < ::ApplicationController
   prepend_view_path(Rails.root.join('plugins', 'discourse-custom-wizard', 'views'))
   layout 'wizard'
+
+  skip_before_action :check_xhr, :preload_json
+  
+  before_action :ensure_logged_in
   helper_method :wizard_page_title
 
   def wizard_page_title