diff pylons_app/controllers/admin.py @ 305:61be6dcd49a0

protected admin controllers
author Marcin Kuzminski <marcin@python-works.com>
date Mon, 28 Jun 2010 23:28:31 +0200
parents 3782a6d698af
children
line wrap: on
line diff
--- a/pylons_app/controllers/admin.py	Mon Jun 28 22:49:32 2010 +0200
+++ b/pylons_app/controllers/admin.py	Mon Jun 28 23:28:31 2010 +0200
@@ -28,7 +28,7 @@
 from pylons_app.model import meta
 from pylons_app.model.db import UserLog
 from webhelpers.paginate import Page
-from pylons_app.lib.auth import LoginRequired
+from pylons_app.lib.auth import LoginRequired, HasPermissionAllDecorator
 
 log = logging.getLogger(__name__)
 
@@ -36,11 +36,9 @@
     
     @LoginRequired()
     def __before__(self):
-        user = session['hg_app_user']
-        c.admin_user = user.is_admin
-        c.admin_username = user.username
         super(AdminController, self).__before__()
-        
+    
+    @HasPermissionAllDecorator('hg.admin')        
     def index(self):
         sa = meta.Session