lundi 9 mars 2015

Rails devise disable password recovery for certain user types

In my Rails project I have different types of users one of which has the user_status :admin, which has full rights to edit content unlike the rest of the users. For obvious reasons I want to add additional security for these types of users, in particular, completely disable password recovery.


What is the correct way of overriding standard Devise password recovery (:recoverable Devise module) methods so that when a user tries to get a reset password link for a user which is an admin user (user_status == "admin") the system gives back the "standard email not found" message?


This is somewhat like the unanswered question: Restrict Devise password recovery to only certain users


Thank you in advance.


Aucun commentaire:

Enregistrer un commentaire