Marked Controllers private / public and added authorization filters accordingly

12 files changed, 44 insertions, 2 deletions

diff --git a/app/controllers/admin_controller.rb b/app/controllers/admin_controller.rb
index b911727..538e7d7 100644
--- a/app/controllers/admin_controller.rb
+++ b/app/controllers/admin_controller.rb
@@ -1,4 +1,7 @@
 class AdminController < ApplicationController
+  
+  # Private
+  
   before_filter :login_required
 
   def index
diff --git a/app/controllers/assets_controller.rb b/app/controllers/assets_controller.rb
index b1abb0f..cfaf176 100644
--- a/app/controllers/assets_controller.rb
+++ b/app/controllers/assets_controller.rb
@@ -1,5 +1,9 @@
 class AssetsController < ApplicationController
   
+  # Private
+  
+  before_filter :login_required
+  
   layout 'admin'
   
   def index
diff --git a/app/controllers/content_controller.rb b/app/controllers/content_controller.rb
index d1bfa6b..250e6ba 100644
--- a/app/controllers/content_controller.rb
+++ b/app/controllers/content_controller.rb
@@ -1,5 +1,7 @@
 class ContentController < ApplicationController
   
+  # Public
+  
   before_filter :find_page
   
   # This is the method that renders most of the the public content. It recieves
@@ -27,7 +29,7 @@ class ContentController < ApplicationController
 
   def render_gallery
     @images = @page.assets.images
-    render :file => "custom/page_templates/public/gallery"#, :layout => true
+    render :file => "custom/page_templates/public/gallery"
   end
   
   private
diff --git a/app/controllers/events_controller.rb b/app/controllers/events_controller.rb
index 00b98f1..805e941 100644
--- a/app/controllers/events_controller.rb
+++ b/app/controllers/events_controller.rb
@@ -1,5 +1,9 @@
 class EventsController < ApplicationController
   
+  # Private
+  
+  before_filter :login_required
+  
   layout 'admin'
   
   # GET /events
diff --git a/app/controllers/menu_items_controller.rb b/app/controllers/menu_items_controller.rb
index dac78d9..808da15 100644
--- a/app/controllers/menu_items_controller.rb
+++ b/app/controllers/menu_items_controller.rb
@@ -1,4 +1,8 @@
 class MenuItemsController < ApplicationController
+
+  # Private
+
+  before_filter :login_required
   
   layout 'admin'
   
diff --git a/app/controllers/nodes_controller.rb b/app/controllers/nodes_controller.rb
index 07bbbac..f8b8058 100644
--- a/app/controllers/nodes_controller.rb
+++ b/app/controllers/nodes_controller.rb
@@ -1,6 +1,9 @@
 class NodesController < ApplicationController
   
+  # Private
+  
   layout 'admin'
+  
   before_filter :login_required
   before_filter :find_node, :only => [
                               :show, 
diff --git a/app/controllers/occurrences_controller.rb b/app/controllers/occurrences_controller.rb
index e3f1cdd..751be40 100644
--- a/app/controllers/occurrences_controller.rb
+++ b/app/controllers/occurrences_controller.rb
@@ -1,4 +1,9 @@
 class OccurrencesController < ApplicationController
+  
+  # Private
+  
+  before_filter :login_required
+  
   # GET /occurrences
   # GET /occurrences.xml
   def index
diff --git a/app/controllers/pages_controller.rb b/app/controllers/pages_controller.rb
index 6e826c0..a684327 100644
--- a/app/controllers/pages_controller.rb
+++ b/app/controllers/pages_controller.rb
@@ -1,5 +1,9 @@
 class PagesController < ApplicationController
-    
+  
+  # Private
+  
+  before_filter :login_required
+  
   def preview
     @page = Page.find(params[:id])
     
diff --git a/app/controllers/revisions_controller.rb b/app/controllers/revisions_controller.rb
index e2c0432..32110ae 100644
--- a/app/controllers/revisions_controller.rb
+++ b/app/controllers/revisions_controller.rb
@@ -1,5 +1,9 @@
 class RevisionsController < ApplicationController
   
+  # Private
+  
+  before_filter :login_required
+  
   layout 'admin'
   
   def index
diff --git a/app/controllers/sessions_controller.rb b/app/controllers/sessions_controller.rb
index 813344b..e115b35 100644
--- a/app/controllers/sessions_controller.rb
+++ b/app/controllers/sessions_controller.rb
@@ -1,6 +1,8 @@
 # This controller handles the login/logout function of the site.  
 class SessionsController < ApplicationController
   
+  # Public
+  
   layout 'admin'
   
   # render new.rhtml
diff --git a/app/controllers/tags_controller.rb b/app/controllers/tags_controller.rb
index 9248402..7433d21 100644
--- a/app/controllers/tags_controller.rb
+++ b/app/controllers/tags_controller.rb
@@ -1,4 +1,7 @@
 class TagsController < ApplicationController
+  
+  # Public
+  
   def index
   end
 
diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
index 7e8fc9b..19f6b2d 100644
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -1,5 +1,9 @@
 class UsersController < ApplicationController
   
+  # Private
+  
+  before_filter :login_required
+  
   layout 'admin'
   
   def index