Users shouldn't be able to see each other's details

maxjustus / sinatra-authentication

A sinatra extension wrapped in a gem that implements authentication/permissions with users stored in the database. Now with optional support for facebook connect

The Unlicense

478 stars 94 forks source link

Users shouldn't be able to see each other's details #40

Closed darora closed 12 years ago

darora commented 12 years ago

Added a snippet to get '/users/:id' that redirects to home if the requested ID isn't the the current user's id, and the current user isn't an admin.