summaryrefslogtreecommitdiff
path: root/app/controllers/servers_controller.rb
diff options
context:
space:
mode:
Diffstat (limited to 'app/controllers/servers_controller.rb')
-rw-r--r--app/controllers/servers_controller.rb10
1 files changed, 10 insertions, 0 deletions
diff --git a/app/controllers/servers_controller.rb b/app/controllers/servers_controller.rb
index 43999c4..f23f2bf 100644
--- a/app/controllers/servers_controller.rb
+++ b/app/controllers/servers_controller.rb
@@ -1,5 +1,6 @@
class ServersController < ApplicationController
before_action :set_server, only: [:show, :edit, :update, :destroy]
+ before_action :check_perms
# GET /servers
# GET /servers.json
@@ -67,6 +68,15 @@ class ServersController < ApplicationController
@server = Server.find(params[:id])
end
+ def check_perms
+ unless (signed_in? and current_user.in_group?(:admin))
+ respond_to do |format|
+ format.html { render action: 'permission_denied', status: :forbidden }
+ format.json { render json: "Permission denied", status: :forbidden }
+ end
+ end
+ end
+
# Never trust parameters from the scary internet, only allow the white list through.
def server_params
params[:server]