Admin/User role

authenticate filter

  def authenticate_self_or_admin
    m = Member.find(session[:member_id]) 
    if m.role == 'Admin'
      
    elsif session[:member_id].nil?
      
      flash[:alert] = 'You need to login first.'
      redirect_to(:controller => 'admin', :action => 'login')
      
    elsif session[:member_id].to_s != params[:id]
      
      flash[:alert] = 'You cannot perform this action.'
      redirect_to(:controller => 'admin', :action => 'login')
    end