diff options
| -rw-r--r-- | app/controllers/devise/cas_sessions_controller.rb | 4 | ||||
| -rw-r--r-- | app/models/user.rb | 2 |
2 files changed, 5 insertions, 1 deletions
diff --git a/app/controllers/devise/cas_sessions_controller.rb b/app/controllers/devise/cas_sessions_controller.rb index 3b16603b9..96a47eec4 100644 --- a/app/controllers/devise/cas_sessions_controller.rb +++ b/app/controllers/devise/cas_sessions_controller.rb @@ -20,7 +20,9 @@ class Devise::CasSessionsController < Devise::SessionsController if LoginPolicy.new(current_user).boiv? redirect_to after_sign_in_path_for(current_user) else - redirect_to cas_login_url, flash: {alert: t('devise.sessions.new.unauthorized')} + require 'pry' + binding.pry + redirect_to root_path, flash: {alert: t('devise.sessions.new.unauthorized')} end end diff --git a/app/models/user.rb b/app/models/user.rb index 1a06746da..36dd0e006 100644 --- a/app/models/user.rb +++ b/app/models/user.rb @@ -75,6 +75,8 @@ class User < ActiveRecord::Base user.synced_at = Time.now # TODO: Discuss the following behavior in the light of how the portal's permissions will evolve # boiv:edit-offer does not imply boiv:read-offer, which needs to be provided specifically for any connection rights + require 'pry' + binding.pry user.permissions = el['permissions'].include?('boiv:edit-offer') ? @@edit_offer_permissions : [] user.save end |