obdev/app/controllers/admin/users_controller.rb

32 lines
636 B
Ruby

module Admin
class UsersController < ApplicationController
before_action :authenticate_user!
before_action :check_admin
def new_user
@user = User.new
end
def create_user
@user = User.new(user_params)
if @user.save
redirect_to users_path, notice: 'User was successfully created.'
else
render :new_user
end
end
private
def user_params
params.require(:user).permit(:first_name, :last_name, :email, :password, :password_confirmation, :phone, :company)
end
def check_admin
unless current_user.admin?
redirect_to root_path, alert: 'Not authorized'
end
end
end