raucao
8fae099c12
The admin "Default services" setting writes the LDAP serviceEnabled attribute, but remoteStorage access was also gated behind an unused per-user Flipper flag that nothing ever enabled, so remoteStorage was inaccessible for everyone. Gate remoteStorage on service_enabled? like the other services, and make the admin toggle reflect the LDAP attribute (this also fixes it reading current_user instead of the user being viewed). E-Mail keeps its Flipper gate for now.
51 lines
1.2 KiB
Ruby
51 lines
1.2 KiB
Ruby
class Services::RsAuthsController < Services::BaseController
|
|
before_action :authenticate_user!
|
|
before_action :require_service_enabled
|
|
before_action :require_service_available
|
|
before_action :find_rs_auth, only: [:destroy, :launch_app]
|
|
|
|
def index
|
|
@rs_auths = current_user.remote_storage_authorizations
|
|
# TODO sort by app name?
|
|
end
|
|
|
|
def destroy
|
|
@auth.destroy!
|
|
|
|
respond_to do |format|
|
|
format.html do redirect_to apps_services_storage_url, flash: {
|
|
success: 'App authorization revoked'
|
|
}
|
|
end
|
|
format.json { head :no_content }
|
|
end
|
|
end
|
|
|
|
def launch_app
|
|
user_address = Rails.env.development? ?
|
|
"#{current_user.cn}@localhost:3000" :
|
|
current_user.address
|
|
|
|
launch_url = "#{@auth.launch_url}#remotestorage=#{user_address}"
|
|
|
|
redirect_to launch_url, allow_other_host: true
|
|
end
|
|
|
|
private
|
|
|
|
def require_service_enabled
|
|
unless current_user.service_enabled?(:remotestorage)
|
|
http_status :forbidden
|
|
end
|
|
end
|
|
|
|
def require_service_available
|
|
http_status :not_found unless Setting.remotestorage_enabled?
|
|
end
|
|
|
|
def find_rs_auth
|
|
@auth = current_user.remote_storage_authorizations.find(params[:id])
|
|
http_status :not_found unless @auth.present?
|
|
end
|
|
end
|