Question

When you make a site in rails, it creates some pages automatically that allow you to add conctent to your site. You usually acces them by typing domain.com/something/new in the browser.

Let’s say you want to upload the site to the internet. How can you prevent users from accesing that pages? Deleting them doesn’t seem like a good method because then how can you add conctent to the site? Do you password protect them? Is there some better way?

Answer 1

You can use devise to authenticate the user and call authenticate_user in the controller to ensure only authenticated users can go to that page. You can also take a look at cancan which gives you more control like setting read, write permissions.