Files
astuto/app/controllers/application_controller.rb
2022-06-24 14:39:35 +02:00

30 lines
823 B
Ruby

class ApplicationController < ActionController::Base
include Pundit::Authorization
rescue_from Pundit::NotAuthorizedError, with: :user_not_authorized
before_action :configure_permitted_parameters, if: :devise_controller?
before_action :load_boards
protected
def configure_permitted_parameters
additional_permitted_parameters = [:full_name, :notifications_enabled]
devise_parameter_sanitizer.permit(:sign_up, keys: additional_permitted_parameters)
devise_parameter_sanitizer.permit(:account_update, keys: additional_permitted_parameters)
end
def load_boards
@boards = Board.select(:id, :name).order(order: :asc)
end
private
def user_not_authorized
render json: {
error: t('backend.errors.unauthorized')
}, status: :unauthorized
end
end