diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index 0b697fd..fa00f9f 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -4,7 +4,10 @@ class ApplicationController < ActionController::Base protect_from_forgery with: :exception rescue_from CanCan::AccessDenied do |exception| - redirect_to root_url, alert: exception.message + respond_to do |format| + format.json { render nothing: true, status: :forbidden } + format.html { redirect_to root_url, alert: exception.message } + end end def authenticate_user_or_client!