adds job_mod_controller

lobsters · rahul1990gupta · Jan 4, 2025 · Jan 4, 2025 · Jan 4, 2025 · Jan 4, 2025
commit ed9dd05f7a2398bbd9f1bd710b3e321b349a8231
diff --git a/app/controllers/jobs_mod_controller.rb b/app/controllers/jobs_mod_controller.rb
@@ -0,0 +1,48 @@
+class JobsModController < ActionController::Base
+  protect_from_forgery
+  before_action :authenticate_user
+  before_action :require_logged_in_moderator
+
+
+  def authenticate_user
+    # eagerly evaluate, in case this triggers an IpSpoofAttackError
+    request.remote_ip
+
+    if Rails.application.read_only?
+      return true
+    end
+
+    if session[:u] &&
+        (user = User.find_by(session_token: session[:u].to_s)) &&
+        user.is_active?
+      @user = user
+    end
+
+    true
+  end
+
+  def require_logged_in_moderator
+    require_logged_in_user
+
+    if @user
+      if @user.is_moderator?
+        true
+      else
+        flash[:error] = "You are not authorized to access that resource."
+        redirect_to "/"
+      end
+    end
+  end
+
+  def require_logged_in_user
+    if @user
+      true
+    else
+      if request.get?
+        session[:redirect_to] = request.original_fullpath
+      end
+
+      redirect_to "/login"
+    end
+  end
+end
diff --git a/config/application.rb b/config/application.rb
@@ -75,7 +75,7 @@ class Application < Rails::Application
     # rails stop putting js on everything
     config.action_view.form_with_generates_remote_forms = false
 
-    config.mission_control.jobs.base_controller_class = "AdminController"
+    config.mission_control.jobs.base_controller_class = "JobsModController"
     config.mission_control.jobs.http_basic_auth_enabled = false
   end
 end