From 8c9bca8e858ba4419909f6c5484c24c34b51030c Mon Sep 17 00:00:00 2001
From: Adam Soltys <adam.soltys@pwgsc-tpsgc.gc.ca>
Date: Sat, 8 Dec 2012 04:21:03 +0400
Subject: Check variable existence

---
 app.coffee | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/app.coffee b/app.coffee
index fa08ce83..ea2986c7 100644
--- a/app.coffee
+++ b/app.coffee
@@ -46,8 +46,9 @@ for route, view of routes
   )(route, view) 
 
 authorize = (req, res, next) ->
+  console.log(req.user)
   return next() if req.isAuthenticated() and
-    req.params.user is req.user.username or 
+    (req.params.user and req.params.user is req.user.username) or 
     req.user.username is 'admin'
   res.redirect('/login')
 
-- 
cgit v1.2.3