Merge branch 'master' of bitbucket.org:code2lab/sxrestaurant into ui_ux_changes

app/controllers/api/restaurant/item_sets_controller.rb

@@ -1,5 +1,4 @@
 class Api::Restaurant::ItemSetsController < Api::ApiController
-
   #Description
   # Pull the default menu details and also other available (active) menus
   # Input Params - order_id

app/controllers/api/restaurant/menu_categories_controller.rb

@@ -1,5 +1,4 @@
-class Api::Restaurant::MenuCategoriesController < Api::ApiController
- skip_before_action  :authenticate
+class Api::Restaurant::MenuCategoriesController < Api::ApiController 
   #Description
   # Pull the default menu details and also other available (active) menus
   # Input Params - order_id

app/controllers/api/restaurant/menu_controller.rb

@@ -1,5 +1,4 @@
 class Api::Restaurant::MenuController < Api::ApiController
-  skip_before_action  :authenticate
   #Description
   # Pull the default menu details and also other available (active) menus
   # Input Params - order_id

app/controllers/api/restaurant/menu_item_attributes_controller.rb

@@ -1,5 +1,4 @@
-class Api::Restaurant::MenuItemAttributesController < Api::ApiController
-	skip_before_action  :authenticate
+class Api::Restaurant::MenuItemAttributesController < Api::ApiController	
   #Description
   # Pull the default menu details and also other available (active) menus
   # Input Params - order_id

app/controllers/api/restaurant/menu_item_instances_controller.rb

@@ -1,5 +1,4 @@
-class Api::Restaurant::MenuItemInstancesController < Api::ApiController
-  skip_before_action  :authenticate
+class Api::Restaurant::MenuItemInstancesController < Api::ApiController  
   #Description
   # Pull the default menu details and also other available (active) menus
   # Input Params - order_id

app/controllers/base_origami_controller.rb

@@ -15,19 +15,16 @@ class BaseOrigamiController < ActionController::Base
     redirect_to origami_dashboard_path
   end
 
-  def check_user
-    token_status = false
-    authenticate_with_http_token do |token, options|   
-      if token
-        token_status = true
-        session[:webview] = true
-        session[:session_token] = token
-      end
-    end
-
-    if !token_status
+  def check_user   
+    if check_mobile     
       if current_user.nil?
-        redirect_to root_path
+        return render status: 401, json: {
+          message: "User using other device!"          
+        }.to_json
+      end
+    else 
+      if current_user.nil?
+        redirect_to root_path    
       end
     end
   end
@@ -49,9 +46,13 @@ class BaseOrigamiController < ActionController::Base
   #check webview
   def check_mobile
     status = false
-    puts "check mobile"
-    puts session[:session_token]
-    puts session[:webview]
+    authenticate_with_http_token do |token, options|   
+      if token
+        session[:webview] = true
+        session[:session_token] = token
+      end            
+    end
+    
     if session[:webview] && request.user_agent =~ /android|blackberry|iphone|ipad|ipod|iemobile|mobile|webos/i
       status = true
     end

app/controllers/concerns/token_verification.rb

@@ -9,7 +9,7 @@ module TokenVerification
 
   protected
   # Authenticate the user with token based authentication
-  def authenticate
+  def authenticate    
     authenticate_token || render_unauthorized
   end
 

app/controllers/home_controller.rb

@@ -70,6 +70,9 @@ class HomeController < ApplicationController
       elsif @employee.role == "account"
         session[:session_token] = @employee.token_session
         redirect_to reports_dailysale_index_path
+      elsif @employee.role == "kitchen"
+        session[:session_token] = @employee.token_session
+        redirect_to oqs_root_path
       else
          render :index
       end

app/controllers/oqs/edit_controller.rb

@@ -1,4 +1,5 @@
 class Oqs::EditController < BaseOqsController
+  authorize_resource :class => false
   def index
   	assigned_item_id = params[:id]
     @link_type = params[:type]

app/controllers/oqs/home_controller.rb

@@ -1,8 +1,6 @@
 class Oqs::HomeController < BaseOqsController
+  authorize_resource :class => false
   def index
-
-  	
-
     # Query for OQS with delivery status false
   	# @queue_items_details = queue_items_query(false)
 

app/controllers/oqs/print_controller.rb

@@ -1,4 +1,5 @@
 class Oqs::PrintController < ApplicationController
+  authorize_resource :class => false
   # Print Order Item
   def print
     if ENV["SERVER_MODE"] != "cloud" #no print in cloud server