X-Git-Url: https://git.openstreetmap.org/rails.git/blobdiff_plain/685a35524a6e4f91155008e9850049feff298593..6f7eb8f0e8bba2a671136f187b4371153af154c9:/app/controllers/application_controller.rb diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index 926be87ba..8062c9fe3 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -15,6 +15,16 @@ class ApplicationController < ActionController::Base session_expires_automatically redirect_to :controller => "user", :action => "suspended" + + # don't allow access to any auth-requiring part of the site unless + # the new CTs have been seen (and accept/decline chosen). + elsif !@user.terms_seen and flash[:showing_terms].nil? + flash[:notice] = t 'user.terms.you need to accept or decline' + if params[:referer] + redirect_to :controller => "user", :action => "terms", :referer => params[:referer] + else + redirect_to :controller => "user", :action => "terms", :referer => request.request_uri + end end elsif session[:token] @user = User.authenticate(:token => session[:token]) @@ -104,14 +114,15 @@ class ApplicationController < ActionController::Base # check if the user has been banned if not @user.active_blocks.empty? # NOTE: need slightly more helpful message than this. - render :text => t('application.setup_user_auth.blocked'), :status => :forbidden + report_error t('application.setup_user_auth.blocked'), :forbidden end # if the user hasn't seen the contributor terms then don't # allow editing - they have to go to the web site and see # (but can decline) the CTs to continue. if REQUIRE_TERMS_SEEN and not @user.terms_seen - render :text => t('application.setup_user_auth.need_to_see_terms'), :status => :forbidden + set_locale + report_error t('application.setup_user_auth.need_to_see_terms'), :forbidden end end end