Tell me more ×  I am trying to require an authorization in my
controller called purcahses_controller.rb It's just an order
form model with Show Edit Destroy.. I can view it in
active_admin, the url being localhost/admin/purchases. But the
problem is I can also view it at localhost/purchases. It lists
all of the orders and allows all functions. Id like to route_to
rooturl with a simple unauthorized message if the user isn't
logged in.  share|improve this question Sounds like it might be
a routing issue, what does your route look like for the purchase
model? –  Kevin B Jan 7 at 19:55 @kevinb - Well I have tried
several methods with a before_filter and trying to def
authorization, but I was getting more lost. So instead, I guess
I'm asking how would I include a before_filter in my controller
for Activeadmin to be required :only for those ones that need to
be required. Which is everything except creating the order. – 
Russell Kompinski Jan 7 at 20:00 Here is what I did. I added
before_filter :authenticate_user! b