How to allow only the administrator to register a user with Devise

Question

I wanted to know if there is only the administrator register user, with Devise. I can not program this. And where is the controller with the Devise methods in the project?

Answer 1

Devise is an engine. What is an engine? Although it looks a lot like a normal plugin, an engine is actually a kind of application that you "mount" in your application.

Standard plugins only add functionality to your app. Already Ngines, can have their own controllers, models, views, etc. Only that you can not see, because it is in a separate namespace, "invisible" for you.

According to the Devise documentation, you can override the Devise Sessionscontroller as follows:

1. Spin rails generate devise:controllers [scope], where "Scope" is the name of your user table (such as users)

Now the Devise has created for you a controller in app/controllers/[scope]/, inheriting the original controller by inheritance, and allowing you to overwrite your methods.

2. Configure the routes to use this new controller, not the original:

config/routes.rb:

devise_for :users, controllers: {sessions: '[scope]/sessions'}

3. If you are using custom views in app/views/devise, copy to app/views/[scope]

---

To solve your problem, I think a before_action resolves:

class Users::SessionsController < Devise::SessionsController
  before_action :verifica_permissao, only: [...] # configure os métodos que você quer

  def verifica_permissao
    possui_permissao? || redirect_to('/')
  end

  def possui_permissao?
    # aqui você verifica se o usuário é admin
  end
end

References:

• http://guides.rubyonrails.org/engines.html
• http://devise.plataformatec.com.br/#Getting-Started/Configuring-controllers