Abilities für Rollenvergabe

2013-08-18 17:56:54 +02:00
parent 6f6486c7ae
commit b748382df4
2 changed files with 9 additions and 0 deletions
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -4,7 +4,13 @@ class UsersController < ApplicationController
    end
    def add_role
    @user= User.find(params[:id])
+    if (params[:role]=="fetuser" && can?(:addfetuser,User))
    @user.add_role(params[:role])
+    end
+    if (params[:role]=="fetadmin" && can?(:addfetadmin,User))
+    @user.add_role(params[:role])
+    end
+    
    end
    def do_confirm
    @user= User.find(params[:id])