chaas/debshots
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Restrict admin controller to admins

Browse source
This commit is contained in:
Christoph Haas 2018-08-10 16:20:53 +02:00
parent bf96a72158
commit 6182078cdd
1 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
app/controllers/admin_controller.rb
View file

@ -1,5 +1,6 @@
class AdminController < ApplicationController class AdminController < ApplicationController
before_action :authenticate_user! before_action :authenticate_user!
before_action :admin_only
def status def status
end end
@ -20,4 +21,15 @@ class AdminController < ApplicationController
@logs = logs.paginate(page: params[:page], per_page: 20) @logs = logs.paginate(page: params[:page], per_page: 20)
end end
private
def admin_only
unless current_user.is_admin?
head :forbidden
# redirect_to :back, :alert => "Access denied."
end
end
end end