Merge pull request #8 from realstorypro/access-control

added access control to the homepage

app/controllers/concerns/restricted_access.rb

@@ -0,0 +1,15 @@
+module RestrictedAccess
+  extend ActiveSupport::Concern
+
+  included do
+    before_action :authenticate_user!
+    before_action :check_access
+  end
+
+  private
+
+  def check_access
+    redirect_to unauthorized_index_path unless current_user.has_access?
+  end
+
+end

app/controllers/page_controller.rb

@@ -1,6 +1,6 @@
 class PageController < ApplicationController
-  before_action :authenticate_user!
-
+  include RestrictedAccess
   def index
   end
+
 end

app/controllers/unauthorized_controller.rb

@@ -0,0 +1,5 @@
+class UnauthorizedController < ApplicationController
+  def index
+    redirect_to root_path if current_user.has_access?
+  end
+end

app/views/unauthorized/index.html.slim

@@ -0,0 +1,5 @@
+=r ux.container
+  =r ux.row
+    =r ux.column size: 16, class: 'pt-20'
+      =r ux.h1 text: 'Unauthorized', class: 'center aligned'
+      =r ux.text text: 'You are not authorized to access this page.', class: 'text-center'

config/routes.rb

@@ -3,6 +3,7 @@
   apipie
 
   root "page#index"
+  resources :unauthorized, only: %i[index]
 
   namespace :api, defaults: { format: 'json' } do
     namespace :v1 do

tailwind.config.js

@@ -7,6 +7,7 @@ module.exports = {
         './app/frontend/**/*.js',
         './app/views/**/*',
         './app/views/devise/**/*',
+        './app/views/unauthorized/**/*',
         './app/components/**/*',
     ],
     theme: {