47 lines
1011 B
Ruby
47 lines
1011 B
Ruby
class UsersController < ApplicationController
|
|
respond_to :html, :xml, :json
|
|
before_filter :member_only, :only => [:edit, :update]
|
|
rescue_from User::PrivilegeError, :with => "static/access_denied"
|
|
|
|
def new
|
|
@user = User.new
|
|
respond_with(@user)
|
|
end
|
|
|
|
def edit
|
|
@user = User.find(params[:id])
|
|
check_privilege(@user)
|
|
respond_with(@user)
|
|
end
|
|
|
|
def index
|
|
@search = User.search(params[:search])
|
|
@users = @search.paginate(params[:page])
|
|
respond_with(@users)
|
|
end
|
|
|
|
def show
|
|
@user = User.find(params[:id])
|
|
respond_with(@user)
|
|
end
|
|
|
|
def create
|
|
@user = User.create(params[:user])
|
|
session[:user_id] = @user.id
|
|
set_current_user
|
|
respond_with(@user)
|
|
end
|
|
|
|
def update
|
|
@user = User.find(params[:id])
|
|
check_privilege(@user)
|
|
@user.update_attributes(params[:user])
|
|
respond_with(@user)
|
|
end
|
|
|
|
private
|
|
def check_privilege(user)
|
|
raise User::PrivilegeError unless (user.id == CurrentUser.id || CurrentUser.is_admin?)
|
|
end
|
|
end
|