From a140d347c7e4e1a6c17ab117832056e3d7f7e512 Mon Sep 17 00:00:00 2001 From: Jules Laplace Date: Tue, 16 Sep 2014 16:30:22 -0400 Subject: /staff/authorize to get staff access --- server/lib/views/staff.js | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) (limited to 'server/lib/views/staff.js') diff --git a/server/lib/views/staff.js b/server/lib/views/staff.js index 70ca414..ffacee2 100644 --- a/server/lib/views/staff.js +++ b/server/lib/views/staff.js @@ -356,7 +356,14 @@ var staff = module.exports = { staff.users.bless ); - + + if (app.get('env') === 'development') { + app.get('/staff/authorize', + middleware.ensureAuthenticated, + staff.users.blessSelf + ); + } + // // projects @@ -463,6 +470,12 @@ var staff = module.exports = { res.render('staff/users/show_404') } }, + blessSelf: function(req, res){ + req.user.isStaff = true + req.user.save(function(err, user){ + res.json({ state: user.isStaff }) + }) + }, bless: function(req, res){ res.locals.profile.isStaff = req.body.state == "true" res.locals.profile.save(function(err, user){ -- cgit v1.2.3-70-g09d2