class Tracking::BaseController < ApplicationController layout "admin" before_action :authenticate_user! before_action :verify_tracker skip_authorization_check private def verify_tracker raise CanCan::AccessDenied unless current_user.try(:tracker?) || current_user.try(:administrator?) end end