search

tsechingho / ckeditor-rails

Integrate CKEditor javascript library with Rails asset pipeline
https://github.com/tsechingho/ckeditor-rails
MIT License
214 stars 133 forks source link

annonymus access to e.g. host/ckeditor/pictures or any other ckeditor asset model #81

Closed sphinx96 closed 7 years ago

sphinx96 commented 7 years ago

I don't know if it is a bug, but there is an easy anonymous access to any asset folder within ckeditor models. Is there any way to restrict access to ckeditor models? f.e. - in combination with any authentication gem(devise or else)?

sphinx96 commented 7 years ago

for Devise solved with:

config.authorize_with do
  redirect_to SOME_URL unless signed_in?
end