30 lines
1,003 B
Ruby
30 lines
1,003 B
Ruby
# All Administrate controllers inherit from this `Admin::ApplicationController`,
|
|
# making it the ideal place to put authentication logic or other
|
|
# before_filters.
|
|
#
|
|
# If you want to add pagination or other controller-level concerns,
|
|
# you're free to overwrite the RESTful controller actions.
|
|
module ResourceAdmin
|
|
class ApplicationController < Administrate::ApplicationController
|
|
include Pundit
|
|
before_action :authorize_admin
|
|
|
|
def order
|
|
@order ||= Administrate::Order.new(params[:order] || "id", params[:direction] || "desc")
|
|
end
|
|
|
|
def valid_request_origin?
|
|
# Temp monkey patch. Since we use https at the edge via fastly I think our protocol expectations
|
|
# are out of wack.
|
|
raise InvalidAuthenticityToken, NULL_ORIGIN_MESSAGE if request.origin == "null"
|
|
|
|
request.origin.nil? || request.origin.gsub("https", "http") == request.base_url.gsub("https", "http")
|
|
end
|
|
|
|
private
|
|
|
|
def authorize_admin
|
|
authorize :admin, :show?
|
|
end
|
|
end
|
|
end
|