managers can login to /management
This commit is contained in:
@@ -4,7 +4,7 @@ class Management::SessionsController < ActionController::Base
|
||||
|
||||
def create
|
||||
destroy_session
|
||||
if admin? || manager?
|
||||
if admin? || manager? || authenticated_manager?
|
||||
redirect_to management_root_path
|
||||
else
|
||||
raise CanCan::AccessDenied
|
||||
@@ -31,6 +31,12 @@ class Management::SessionsController < ActionController::Base
|
||||
end
|
||||
|
||||
def manager?
|
||||
if current_user.try(:manager?)
|
||||
session[:manager] = {login: "manager_user_#{current_user.id}"}
|
||||
end
|
||||
end
|
||||
|
||||
def authenticated_manager?
|
||||
if manager = ManagerAuthenticator.new(params).auth
|
||||
session[:manager] = manager
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user