mirror of
https://github.com/sstent/expressmongotest.git
synced 2026-01-25 16:42:00 +00:00
tweakign the isAdmin rules
This commit is contained in:
@@ -4,10 +4,10 @@
|
|||||||
*/
|
*/
|
||||||
|
|
||||||
var loggedIn = require('./middleware/logged_in');
|
var loggedIn = require('./middleware/logged_in');
|
||||||
|
var isAdmin = require('./middleware/is_admin');
|
||||||
|
|
||||||
module.exports = function(app) {
|
module.exports = function(app) {
|
||||||
app.get('/', loggedIn, function(req, res){
|
app.get('/', loggedIn, isAdmin, function(req, res){
|
||||||
res.render('index', { title: 'Express' });
|
res.render('index', { title: 'Express' });
|
||||||
});
|
});
|
||||||
};
|
};
|
||||||
@@ -18,7 +18,7 @@ module.exports = function(app) {
|
|||||||
if (user) {
|
if (user) {
|
||||||
req.session.user = user;
|
req.session.user = user;
|
||||||
console.log("req.session.user= " + JSON.stringify(req.session.user));
|
console.log("req.session.user= " + JSON.stringify(req.session.user));
|
||||||
res.redirect('/users');
|
res.redirect('/users/' + req.session.user.username);
|
||||||
} else {
|
} else {
|
||||||
res.redirect('/session/new');
|
res.redirect('/session/new');
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -51,13 +51,13 @@ module.exports = function(app) {
|
|||||||
res.render('users/profile', {
|
res.render('users/profile', {
|
||||||
title: 'User profile',
|
title: 'User profile',
|
||||||
user: req.user,
|
user: req.user,
|
||||||
|
requested: req.params.name,
|
||||||
recentArticles: articles
|
recentArticles: articles
|
||||||
});
|
});
|
||||||
});
|
});
|
||||||
});
|
});
|
||||||
|
|
||||||
app.post('/users', notLoggedIn, function(req, res, next) {
|
app.post('/users', notLoggedIn, function(req, res, next) {
|
||||||
console.log("/nreq.body" + JSON.stringify(req.body));
|
|
||||||
User.create(req.body, function(err) {
|
User.create(req.body, function(err) {
|
||||||
if (err) {
|
if (err) {
|
||||||
if (err.code === 11000) {
|
if (err.code === 11000) {
|
||||||
|
|||||||
@@ -10,6 +10,3 @@ block content
|
|||||||
span Author:
|
span Author:
|
||||||
|
|
||||||
a(href="/users/" + encodeURIComponent(article.author.name))= article.author.name
|
a(href="/users/" + encodeURIComponent(article.author.name))= article.author.name
|
||||||
|
|
||||||
p
|
|
||||||
a(href="/articles") Back to all articles
|
|
||||||
@@ -2,8 +2,11 @@ extends ../layout
|
|||||||
block content
|
block content
|
||||||
h1= user.name
|
h1= user.name
|
||||||
|
|
||||||
- if (session.user.)
|
- if (session.user.name === requested)
|
||||||
h1 Private View
|
h1 Private View
|
||||||
|
p= session.user.name
|
||||||
|
p= requested
|
||||||
|
|
||||||
- else
|
- else
|
||||||
h1 Public View
|
h1 Public View
|
||||||
|
|
||||||
@@ -13,10 +16,3 @@ block content
|
|||||||
li
|
li
|
||||||
a(href="/articles/" + encodeURIComponent(article._id))= article.title
|
a(href="/articles/" + encodeURIComponent(article._id))= article.title
|
||||||
- });
|
- });
|
||||||
|
|
||||||
- if (session.user.is_admin = 'true')
|
|
||||||
form(action="/users/" + encodeURIComponent(user.username), method="POST")
|
|
||||||
input(name="_method", type="hidden", value="DELETE")
|
|
||||||
input(type="submit", value="Delete")
|
|
||||||
|
|
||||||
a(href="/users/") Back to Userlist
|
|
||||||
Reference in New Issue
Block a user