0
@@ -94,11 +94,15 @@ class AdmController < ApplicationController
0
   end
0
 
0
   def authorized?
0
-    current_user.admin?
0
+    logged_in? && current_user.admin?
0
   end
0
 
0
   def access_denied
0
-    # XXX:  Should probably find a good place for this document.
0
-    render :template => 'report/access_denied'
0
+    if logged_in?
0
+      # XXX:  Should probably find a good place for this document.
0
+      render :template => 'report/access_denied'
0
+    else
0
+      redirect_to login_path
0
+    end
0
   end
0
 end

0
@@ -56,6 +56,12 @@ class AdmControllerTest < Test::Unit::TestCase
0
     assert User.authenticate('quentin', 'test'), 'Password changed!'
0
   end
0
 
0
+  def test_reset_not_logged_in
0
+    post :reset_password, :user => 'quentin'
0
+    assert_redirected_to login_path
0
+    assert User.authenticate('quentin', 'test'), 'Password changed!'
0
+  end
0
+
0
   def test_rjs_delete
0
     login_as :quentin
0
     assert_difference 'MoneyTransaction.count', -1 do