X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/3ef0016f85290758f286b6026fbd1a2d0c11ad4e..0b102fac0e8d2a7d46d088b1bd8f7b27b325dd2a:/services/api/app/controllers/arvados/v1/users_controller.rb diff --git a/services/api/app/controllers/arvados/v1/users_controller.rb b/services/api/app/controllers/arvados/v1/users_controller.rb index 50ee3b0547..131ee5236b 100644 --- a/services/api/app/controllers/arvados/v1/users_controller.rb +++ b/services/api/app/controllers/arvados/v1/users_controller.rb @@ -8,9 +8,14 @@ class Arvados::V1::UsersController < ApplicationController before_filter :admin_required, only: [:setup, :unsetup] def current - @object = current_user - show + if current_user + @object = current_user + show + else + send_error("Not logged in", status: 401) + end end + def system @object = system_user show @@ -104,7 +109,7 @@ class Arvados::V1::UsersController < ApplicationController UserNotifier.account_is_setup(@object).deliver end - render json: { kind: "arvados#HashList", items: @response.as_api_response(nil) } + send_json kind: "arvados#HashList", items: @response.as_api_response(nil) end # delete user agreements, vm, repository, login links; set state to inactive @@ -136,7 +141,7 @@ class Arvados::V1::UsersController < ApplicationController } end - def apply_filters + def apply_filters(model_class=nil) return super if @read_users.any? &:is_admin if params[:uuid] != current_user.andand.uuid # Non-admin index/show returns very basic information about readable users.