discourse/app/controllers/admin/impersonate_controller.rb

class Admin::ImpersonateController < Admin::AdminController

  def create
    params.require(:username_or_email)

    user = User.find_by_username_or_email(params[:username_or_email])

    raise Discourse::NotFound if user.blank?

    guardian.ensure_can_impersonate!(user)

    # Log on as the user
    log_on_user(user)

    render nothing: true
  end

end
Initial release of Discourse 2013-02-05 13:16:51 -06:00			`class Admin::ImpersonateController < Admin::AdminController`

			`def create`
Enabled strong_parameters across all models/controllers. All models are now using ActiveModel::ForbiddenAttributesProtection, which shifts the responsibility for parameter whitelisting for mass-assignments from the model to the controller. attr_accessible has been disabled and removed as this functionality replaces that. The require_parameters method in the ApplicationController has been removed in favor of strong_parameters' #require method. It is important to note that there is still some refactoring required to get all parameters to pass through #require and #permit so that we can guarantee that parameter values are scalar. Currently strong_parameters, in most cases, is only being utilized to require parameters and to whitelist the few places that do mass-assignments. 2013-06-06 02:14:32 -05:00			`params.require(:username_or_email)`
Initial release of Discourse 2013-02-05 13:16:51 -06:00
fix horribly broken invite code, could lead to inviting the wrong person to a conversation 2013-06-18 19:31:19 -05:00			`user = User.find_by_username_or_email(params[:username_or_email])`
refactor Topic * move finding by username/email to User * make SiteSetting return a range of possible post title lengths * remove unnecessary conditions 2013-02-26 10:27:59 -06:00
Initial release of Discourse 2013-02-05 13:16:51 -06:00			`raise Discourse::NotFound if user.blank?`

			`guardian.ensure_can_impersonate!(user)`

			`# Log on as the user`
			`log_on_user(user)`

			`render nothing: true`
Fix all the trailing whitespace 2013-02-07 09:45:24 -06:00			`end`
Initial release of Discourse 2013-02-05 13:16:51 -06:00
			`end`