Merge pull request #2291 from alphagov/homepage-editior-permission

Add homepage editor permission for all controller actions
alphagov · Aug 19, 2024 · 9f1c422 · 9f1c422
2 parents 8c0e8cf + 7e74125
commit 9f1c422
Show file tree

Hide file tree

Showing 5 changed files with 191 additions and 151 deletions.
diff --git a/app/controllers/homepage_controller.rb b/app/controllers/homepage_controller.rb
@@ -1,6 +1,9 @@
 class HomepageController < ApplicationController
   layout "design_system"
   before_action :fetch_latest_popular_link
+  before_action :require_homepage_editor_permissions
+
+  include GDS::SSO::ControllerMethods
 
   def show
     render "homepage/popular_links/show"
@@ -117,4 +120,8 @@ def raise_support_error_message
   def support_link
     "<a href=\"#{Plek.external_url_for('support')}/technical_fault_report/new\">please raise a support ticket</a>"
   end
+
+  def require_homepage_editor_permissions
+    authorise_user!("homepage_editor")
+  end
 end
diff --git a/test/functional/homepage_controller_test.rb b/test/functional/homepage_controller_test.rb
@@ -2,7 +2,7 @@
 
 class HomepageControllerTest < ActionController::TestCase
   setup do
-    login_as_stub_user
+    login_as_homepage_editor
   end
 
   context "#show" do