X-Git-Url: https://git.openstreetmap.org/rails.git/blobdiff_plain/2ab3d56102661f31cc41ef3edca5d72f904a3070..6b44a1976cf07ba50ba8aed8b34434e69a45e62d:/app/controllers/application_controller.rb diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index 5f88eb983..54d5835bb 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -4,6 +4,8 @@ class ApplicationController < ActionController::Base protect_from_forgery :with => :exception + rescue_from CanCan::AccessDenied, :with => :deny_access + before_action :fetch_body around_action :better_errors_allow_inline, :if => proc { Rails.env.development? } @@ -468,9 +470,17 @@ class ApplicationController < ActionController::Base raise end - rescue_from CanCan::AccessDenied do |exception| - raise "Access denied on #{exception.action} #{exception.subject.inspect}" - # ... + def current_ability + Ability.new(current_user, current_token) + end + + def deny_access(exception) + if current_user + raise "Access denied on #{exception.action} #{exception.subject.inspect}" + # ... + else + require_user + end end private