app/controllers/application_controller.rb
# Prevent CSRF attacks by raising an exception.
# For APIs, you may want to use :null_session instead.
Prevent CSRF attacks by raising an exception.
For APIs, you may want to use :null_session instead.
Prevent CSRF attacks by raising an exception . For APIs you may want to use : null_session instead .
def must_be_admin
    unless current_user_is_admin?
      deny_access("you do not have permission to view that page")
    end
  end
def must_be_admin unless current_user_is_admin? deny_access ( "you do not have permission to view that page" ) end end
Prevent CSRF attacks by raising an exception.
Prevent CSRF attacks by raising an exception .