[myexperiment-hackers] [1901] branches/event_logging/app/controllers/blobs_controller.rb: Bug-fix for blobs_controller: not logged in user attempting to view not authorized file would get an app crash before .

[noreply]

Revision

1901

Author

alekses6

Date

2008-10-30 07:54:41 -0400 (Thu, 30 Oct 2008)

Log Message

Bug-fix for blobs_controller: not logged in user attempting to view not authorized file would get an app crash before.

Modified Paths

• branches/event_logging/app/controllers/blobs_controller.rb

Diff

Modified: branches/event_logging/app/controllers/blobs_controller.rb (1900 => 1901)

--- branches/event_logging/app/controllers/blobs_controller.rb	2008-10-30 10:42:30 UTC (rev 1900)
+++ branches/event_logging/app/controllers/blobs_controller.rb	2008-10-30 11:54:41 UTC (rev 1901)
@@ -311,12 +311,8 @@
                                       :name => @blob.local_name
 
       else
-        if logged_in? 
-          error("File not found (id not authorized)", "is invalid (not authorized)")
-          return false
-        else
-          find_blob_auth if login_required
-        end
+        error("File not found (or you are not authorized to perform requested action)", "is invalid (not authorized)")
+        return false
       end
     rescue ActiveRecord::RecordNotFound
       error("File not found", "is invalid")