first security

speedy901990 · May 27, 2013 · 18c3eb3 · 18c3eb3
1 parent f195f7e
commit 18c3eb3
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/app/controllers/sessions_controller.rb b/app/controllers/sessions_controller.rb
@@ -6,6 +6,7 @@ def create
     user = User.authenticate(params[:email], params[:password])
     if user
       session[:user_id] = user.id
+      session[:user_is_admin] = user.is_admin
       redirect_to root_url, :notice => "Logged in!"
     else
       flash.now.alert = "Invalid email or password"
@@ -15,6 +16,7 @@ def create
 
   def destroy
     session[:user_id] = nil
+    session[:user_is_admin] = nil
     #flash.now[:notice] = "TEST MESSAGE"
     redirect_to root_url, :notice => "Logged out!"
 

diff --git a/app/views/layouts/application.html.erb b/app/views/layouts/application.html.erb
@@ -27,7 +27,9 @@
 		<div id='cssmenu'>
 		  <ul>
 			<li/>
+			<% if (session[:user_is_admin] == true) %>
 			<li><%= link_to "Home", root_path %></li>
+			<% end %>
 			<li class='has-sub'><%= link_to "Repository",
 									repositories_path %>
 			  <ul>
@@ -64,7 +66,7 @@
 		  <%= yield %>
 		</main>
 		<aside>
-		  TEST
+
 		</aside>
 	  </sub>
 	</div>