IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

FEATURE: new 'prevent anons from download files' site setting

Browse Source
This commit is contained in:
Régis Hanol
2014-09-09 18:40:11 +02:00
parent 0ee386c7f4
commit eb34ecfc0c
6 changed files with 26 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
app/assets/javascripts/discourse/lib/click_track.js
View File

@@ -79,7 +79,7 @@ Discourse.ClickTrack = {
e.preventDefault();
// We don't track clicks on quote back buttons
if ($link.hasClass('back') || $link.hasClass('quote-other-topic')) return true;
if ($link.hasClass('back') || $link.hasClass('quote-other-topic')) { return true; }
// Remove the href, put it as a data attribute
if (!$link.data('href')) {
@@ -90,6 +90,12 @@ Discourse.ClickTrack = {
$link.data('auto-route', true);
}
// warn the user if they can't download the file
if (Discourse.SiteSettings.prevent_anons_from_downloading_files && $link.hasClass("attachment") && !Discourse.User.current()) {
bootbox.alert(I18n.t("post.errors.attachment_download_requires_login"));
return false;
}
// If we're on the same site, use the router and track via AJAX
if (Discourse.URL.isInternal(href) && !$link.hasClass('attachment')) {
Discourse.ajax("/clicks/track", {

1
app/controllers/uploads_controller.rb
View File

@@ -20,6 +20,7 @@ class UploadsController < ApplicationController
RailsMultisite::ConnectionManagement.with_connection(params[:site]) do |db|
return render_404 unless Discourse.store.internal?
return render_404 if SiteSetting.prevent_anons_from_downloading_files && current_user.nil?
id = params[:id].to_i
url = request.fullpath