Transition actions with key fail if model isn't visible to guests
Reported by Matt Jones | August 10th, 2009 @ 09:18 AM | in Hobo 1.0 - Final
In model_controller.rb, prepare_transition calls find_instance, which in turn calls user_find to get the object that's being transitioned. If the user isn't logged in, and guests are not allowed to view the model, a PermissionDenied is thrown. The typical use case for this is in reset_password with non-public user accounts.
I think I've got a tweak that works in my fork, but I'd like to figure out a more reliable way to test this sort of thing.
Comments and changes to this ticket
-
Tom Locke October 24th, 2009 @ 06:17 PM
- State changed from “new” to “open”
-
Matt Jones November 10th, 2009 @ 04:23 AM
- State changed from “open” to “resolved”
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
Matt Jones
Tom Locke