3 Commits

Author	SHA1	Message	Date
Bharat Mediratta	9cf2c57921	Normalize CSRF handling into the access helper. Probably not the best ... place for it, but it'll do for now. Do CSRF checking in the Admin controller so that we're safe across the board on the admin side.	2008-12-22 04:33:18 +00:00
Bharat Mediratta	e4bace4c74	Collapse Admin_Dashboard_Controller down into a single theme call, since now ... all dashboard blocks are stored in modules.	2008-12-20 01:42:18 +00:00
Bharat Mediratta	855a5928ce	Create a new pattern for Site Admin controllers: ... 1) They must all start with "admin_". This pattern is not directly routable. 2) Their urls must be /admin/xxx. 3) The Admin_Controller will take the xxx and look for Admin_Xxx_Controller and will delegate to that admin controller, after doing security checks. Moved the users and dashboard views into individual modules for now.	2008-12-19 09:47:13 +00:00