require 'csv' module Management class ManagementController < ::ApplicationController before_action :authenticate_user!, :authorize_user! layout 'management' private def authorize_user! head :forbidden unless current_user.admin? end end end