hackathon_manager 0.13.0 → 0.13.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ac76ddc635787194b110815a1d4644597c6764de671879e922f6aa16cdb95c4f
-  data.tar.gz: 322bfb6e07da66de298b84d5340c27b2955ce4e70b63a612809f66e05d1c973a
+  metadata.gz: edbee88bd48b0012031f81d0c2a0c919a5947c4a5939edd1bb0afc4e873bac82
+  data.tar.gz: f1076092210ee338b5a6bdc764b7af0b917c41a0a4389cfd5a5912b8b3ad9317
 SHA512:
-  metadata.gz: 3ebb6b641937dc02641948d780a63a6e4bbd62537883eee58f98d09e3e329ea4d19a5fb77e70a36eb0110c70b2d5e652d56effee3528ccd476fa57190f9b5a83
-  data.tar.gz: 839c8439546cffd2efba661f119b1fbdbff1c834944296cdaea6ce12b3427adfccdf37c6c591cc65f5c245fd465e004dd6e578069c281bb90453c7733cacb4e1
+  metadata.gz: 591427e0bc9e78d9188c852cb9e7861e99cbd50e2172bb3617410762f9b4a504fc6efe07ae909591a90a740d1ba91841d557df40d521f5fae6a422f7bd5e7981
+  data.tar.gz: 30e6bc7c85b75ab71fe60ed1265492368c09d2535d3c3ecb3d5797013ebd7f34c18527791a0d24fb39cd08d4baedd2821b690104cf2830af632d33faeb49b3d9

data/app/controllers/manage/application_controller.rb

@@ -1,7 +1,7 @@
 class Manage::ApplicationController < ApplicationController
   before_action :logged_in
   before_action :require_admin_or_limited_admin
-  before_action :limit_admin_access, only: ["edit", "update", "new", "create", "destroy", "convert_to_admin", "deliver", "merge", "perform_merge", "toggle_bus_captain", "duplicate", "update_acc_status", "send_update_email", "live_preview"]
+  before_action :limit_write_access_to_admins, only: ["edit", "update", "new", "create", "destroy", "convert_to_admin", "deliver", "merge", "perform_merge", "toggle_bus_captain", "duplicate", "update_acc_status", "send_update_email", "live_preview"]
   skip_before_action :verify_authenticity_token, if: :json_request?
 
   def logged_in
@@ -12,7 +12,11 @@ class Manage::ApplicationController < ApplicationController
     return redirect_to root_path unless current_user.try(:admin?) || current_user.try(:admin_limited_access?)
   end
 
-  def limit_admin_access
+  def require_admin_or_limited_admin_or_event_tracking
+    redirect_to root_path unless current_user.try(:admin?) || current_user.try(:admin_limited_access?) || current_user.try(:event_tracking?)
+  end
+
+  def limit_write_access_to_admins
     redirect_to url_for(controller: controller_name, action: :index) unless current_user.try(:admin?)
   end
 

data/app/controllers/manage/dashboard_controller.rb

@@ -1,4 +1,7 @@
 class Manage::DashboardController < Manage::ApplicationController
+  skip_before_action :require_admin_or_limited_admin
+  before_action :require_admin_or_limited_admin_or_event_tracking
+
   def index
   end
 

data/app/controllers/manage/trackable_events_controller.rb

@@ -1,4 +1,7 @@
 class Manage::TrackableEventsController < Manage::ApplicationController
+  skip_before_action :require_admin_or_limited_admin
+  before_action :require_admin_or_limited_admin_or_event_tracking
+
   before_action :set_trackable_event, only: [:show, :edit, :update, :destroy]
   before_action :scope_limited_admin_access, only: [:edit, :update, :destroy]
 
@@ -78,13 +81,8 @@ class Manage::TrackableEventsController < Manage::ApplicationController
     params.require(:trackable_event).permit(:band_id, :trackable_tag_id)
   end
 
-  # Permit everyone but regular users to access this controller
-  def require_admin_or_limited_admin
-    redirect_to root_path if current_user.try(:user?)
-  end
-
-  # Permit limited-access admins (overrides Manage::ApplicationController#limit_admin_access)
-  def limit_admin_access
+  # Permit limited-access admins (overrides Manage::ApplicationController#limit_write_access_to_admins)
+  def limit_write_access_to_admins
   end
 
   # If the user isn't a full admin, scope changes only to those they created

data/app/controllers/manage/trackable_tags_controller.rb

@@ -1,4 +1,7 @@
 class Manage::TrackableTagsController < Manage::ApplicationController
+  skip_before_action :require_admin_or_limited_admin
+  before_action :require_admin_or_limited_admin_or_event_tracking
+
   before_action :set_trackable_tag, only: [:show, :edit, :update, :destroy]
 
   respond_to :html, :json

data/lib/hackathon_manager/version.rb

@@ -1,3 +1,3 @@
 module HackathonManager
-  VERSION = '0.13.0'.freeze
+  VERSION = '0.13.1'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: hackathon_manager
 version: !ruby/object:Gem::Version
-  version: 0.13.0
+  version: 0.13.1
 platform: ruby
 authors:
 - Stuart Olivera
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-01-18 00:00:00.000000000 Z
+date: 2019-01-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails