25 lines
820 B
Ruby
25 lines
820 B
Ruby
# config/initializers/pundit.rb
|
|
# Extends the ApplicationController to add Pundit for authorization.
|
|
# Modify this file to change the behavior of a 'not authorized' error.
|
|
# Be sure to restart your server when you modify this file.
|
|
module PunditHelper
|
|
extend ActiveSupport::Concern
|
|
|
|
included do
|
|
include Pundit::Authorization
|
|
# https://github.com/elabs/pundit#ensuring-policies-are-used
|
|
#after_action :verify_authorized, except: :index
|
|
#after_action :verify_policy_scoped, only: :index
|
|
rescue_from Pundit::NotAuthorizedError, with: :user_not_authorized
|
|
end
|
|
|
|
private
|
|
|
|
def user_not_authorized
|
|
flash[:alert] = 'Access denied.'
|
|
redirect_to (request.referrer || root_path)
|
|
end
|
|
end
|
|
|
|
# ApplicationController.send :include, PunditHelper unless (Rails.env.development? || Rails.env.test?)
|