Question

I use require_admin! frequently in my controllers. It works great.

Now, I want to add named route like so:

# config/routes.rb
match "poniesandrainbows" => redirect("https://poniesandrainbows.com")
# ^sadly, not really a website, btw.^

How do I restrict access to that route? Is this possible? Obviously it redirects to a public URL, but I still want to keep the route private.

Answer 1

You cannot restrict access from routes.

The safest way to match “poniesandrainbows” with a controller where you can use require_admin! and then redirect them to the public url.

You can try to solve the problem on the front end. Maybe only show the link to admin users.
It won’t stop other users to paste the link directly to their browser url though