hotfix to avoid redirection loop, not a solution yet; Refs: #3791

2 files changed, 5 insertions, 1 deletions

diff --git a/app/controllers/devise/cas_sessions_controller.rb b/app/controllers/devise/cas_sessions_controller.rb
index 3b16603b9..96a47eec4 100644
--- a/app/controllers/devise/cas_sessions_controller.rb
+++ b/app/controllers/devise/cas_sessions_controller.rb
@@ -20,7 +20,9 @@ class Devise::CasSessionsController < Devise::SessionsController
     if LoginPolicy.new(current_user).boiv?
       redirect_to after_sign_in_path_for(current_user)
     else
-      redirect_to cas_login_url, flash: {alert: t('devise.sessions.new.unauthorized')}
+      require 'pry'
+      binding.pry
+      redirect_to root_path, flash: {alert: t('devise.sessions.new.unauthorized')}
     end
   end
 
diff --git a/app/models/user.rb b/app/models/user.rb
index 1a06746da..36dd0e006 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -75,6 +75,8 @@ class User < ActiveRecord::Base
       user.synced_at    = Time.now
       # TODO: Discuss the following behavior in the light of how the portal's permissions will evolve
       # boiv:edit-offer does not imply boiv:read-offer, which needs to be provided specifically for any connection rights
+        require 'pry'
+        binding.pry
       user.permissions  = el['permissions'].include?('boiv:edit-offer') ? @@edit_offer_permissions : []
       user.save
     end