Explorar o código

Prevent guests from accessing custom wizards

Angus McLeod %!s(int64=7) %!d(string=hai) anos
pai
achega
760c67bb6f
Modificáronse 1 ficheiros con 4 adicións e 0 borrados
  1. 4 0
      controllers/wizard.rb

+ 4 - 0
controllers/wizard.rb

@@ -1,6 +1,10 @@
 class CustomWizard::WizardController < ::ApplicationController
   prepend_view_path(Rails.root.join('plugins', 'discourse-custom-wizard', 'views'))
   layout 'wizard'
+
+  skip_before_action :check_xhr, :preload_json
+  
+  before_action :ensure_logged_in
   helper_method :wizard_page_title
 
   def wizard_page_title