From 69f57f940ef058499043a33b811a0f74b5e08602 Mon Sep 17 00:00:00 2001
From: "Jesse C. Fisher" <jessecfisher@gmail.com>
Date: Mon, 17 Aug 2015 15:10:24 -0700
Subject: [PATCH] Bug fix for Guard/Spring/Pundit
 https://github.com/RailsApps/rails-devise-pundit/issues/10

---
 app/controllers/application_controller.rb | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index d83690e1..096e3343 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -2,4 +2,26 @@ class ApplicationController < ActionController::Base
   # Prevent CSRF attacks by raising an exception.
   # For APIs, you may want to use :null_session instead.
   protect_from_forgery with: :exception
+
+  # config/initializers/pundit.rb
+  # Extends the ApplicationController to add Pundit for authorization.
+  # Modify this file to change the behavior of a 'not authorized' error.
+  # Be sure to restart your server when you modify this file.
+  module PunditHelper
+    extend ActiveSupport::Concern
+
+    #included do
+      #include Pundit
+      #rescue_from Pundit::NotAuthorizedError, with: :user_not_authorized
+    #end
+
+    private
+
+    def user_not_authorized
+      flash[:alert] = 'Access denied.'
+      redirect_to (request.referrer || root_path)
+    end
+  end
+
+  ApplicationController.send :include, PunditHelper
 end