Non-admins cannot edit blog entires.

LindseyB · LindseyB · commit 95bd19fac116 · 2010-07-11T13:39:03.000-04:00
diff --git a/features/blog.feature b/features/blog.feature
@@ -37,4 +37,13 @@ Feature: The Hackety Blog
 		And I am on the post page for the post with the title "new title"
 		And I should see "new title"
 		And I should see "new body"
-		
+	Scenario: Not logged in users cannot edit a post
+		Given I'm not logged in
+		And there is a blog post with the title "First Post"
+		And I go to the edit post page for the post with the title "First Post"
+		Then I should see "Sorry, buddy"
+	Scenario: Non-admin users cannot edit a post
+		Given I'm logged in
+		And there is a blog post with the title "First Post"
+		And I go to the edit post page for the post with the title "First Post"
+		Then I should see "Sorry, buddy"	
diff --git a/hackety.rb b/hackety.rb
@@ -58,6 +58,11 @@
 end
 
 get "/posts/:id/edit" do
+	unless current_user.admin?
+		flash[:notice] = "Sorry, buddy"
+		redirect "/posts"
+	end
+
 	@post = Post.find(params[:id])
 	haml :posts_edit
 end
