class AdminConstraint def matches?(request) return false unless request.session[:newweb_user_id] user = User.find request.session[:newweb_user_id] user && user.admin? end end