User index permissions

hcarreras · hcarreras · commit 0fa6f9352650 · 2013-08-23T00:31:05.000+02:00
diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
@@ -1,13 +1,12 @@
 class UsersController < InheritedController
   load_and_authorize_resource
   skip_authorize_resource :only => [:following, :followers] #anyone can perform these read-only actions
+
   require 'will_paginate/array'
 
   def index
-    @users = User.all.paginate(:page => params[:page], :per_page => 1)
-    respond_to do |format|
-      format.html
-    end  
+    redirect_to root_path unless current_user and current_user.moderator
+    @users = User.all.paginate(:page => params[:page], :per_page => 10)
   end
 
   def follow
diff --git a/app/views/shared/menu/_user.html.haml b/app/views/shared/menu/_user.html.haml
@@ -1,5 +1,7 @@
 = semantic_menu :class => "nav secondary-nav" do |root|
   - if current_user
+    - if current_user.moderator
+      - root.add "Send an Email", users_index_path
     - root.add current_user.username, user_path(current_user)
     - root.add "Log Out", logout_path
   - else
