Very preliminary ACLs.

Just hiding units on the overview page at the moment.

1 files changed, 6 insertions, 12 deletions

diff --git a/src/server.rs b/src/server.rs
index 4e5b6f3..6fb534d 100644
--- a/src/server.rs
+++ b/src/server.rs
@@ -72,8 +72,12 @@ fn url_for(r: &mut Request, path: &str) -> Url {
 
 fn overview(r: &mut Request) -> IronResult<Response> {
     let mut _value = try!(r.session().get::<Login>());
-
-    let units = unit::get_units("*").unwrap();
+    let user = get_logged_in_user(r)?;
+    
+    let units = match user {
+        Some(user) => unit::get_units("*").unwrap(),
+        None => vec!(),
+    };
 
     let sections = ["service", "timer", "socket", "target", "slice", "mount", "path"];
     let units_by_section = sections
@@ -87,16 +91,6 @@ fn overview(r: &mut Request) -> IronResult<Response> {
              })
         .collect::<Vec<_>>();
 
-    // let res = Ok(Response::with((status::Ok,
-    //                              Header(ContentType::html()),
-    //                              render_message(&format!("Hello, {} ({})",
-    //                                                      name,
-    //                                                      session_value.0),
-    //                                             &units))));
-
-    // info!("Updating session value. Current value: {}", session_value.0);
-    // session_value.0.push('a');
-    // try!(r.session().set(session_value));
     let renderer = make_renderer(r)?;
     Ok(Response::with((status::Ok,
                        Header(ContentType::html()),