diff options
author | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2011-12-13 20:40:03 +0000 |
---|---|---|
committer | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2011-12-13 20:40:03 +0000 |
commit | 7d501eaf81f32c6cf6e361192968aacbe18ff36c (patch) | |
tree | c4a45eeedcf135666b6df315c1dca69c73b9c88d /lib | |
parent | 59c1141e08637a923a0aa80a86c8f8d6dbf0cb41 (diff) | |
download | redmine-7d501eaf81f32c6cf6e361192968aacbe18ff36c.tar.gz redmine-7d501eaf81f32c6cf6e361192968aacbe18ff36c.zip |
Code cleanup.
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@8200 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'lib')
-rw-r--r-- | lib/redmine/safe_attributes.rb | 14 |
1 files changed, 11 insertions, 3 deletions
diff --git a/lib/redmine/safe_attributes.rb b/lib/redmine/safe_attributes.rb index 3c17f952d..3724b437d 100644 --- a/lib/redmine/safe_attributes.rb +++ b/lib/redmine/safe_attributes.rb @@ -44,14 +44,22 @@ module Redmine # Example: # book.safe_attributes # => ['title', 'pages'] # book.safe_attributes(book.author) # => ['title', 'pages', 'isbn'] - def safe_attribute_names(user=User.current) + def safe_attribute_names(user=nil) + return @safe_attribute_names if @safe_attribute_names && user.nil? names = [] self.class.safe_attributes.collect do |attrs, options| - if options[:if].nil? || options[:if].call(self, user) + if options[:if].nil? || options[:if].call(self, user || User.current) names += attrs.collect(&:to_s) end end - names.uniq + names.uniq! + @safe_attribute_names = names if user.nil? + names + end + + # Returns true if attr can be set by user or the current user + def safe_attribute?(attr, user=nil) + safe_attribute_names(user).include?(attr.to_s) end # Returns a hash with unsafe attributes removed |