class ApplicationController < ActionController::Base include Pundit::Authorization rescue_from Pundit::NotAuthorizedError, with: :user_not_authorized before_action :configure_permitted_parameters, if: :devise_controller? before_action :load_boards protected def configure_permitted_parameters devise_parameter_sanitizer.permit(:sign_up, keys: [:full_name, :notifications_enabled]) devise_parameter_sanitizer.permit(:account_update, keys: [:full_name, :notifications_enabled]) end def load_boards @boards = Board.select(:id, :name).order(order: :asc) end private def user_not_authorized render json: { error: t('backend.errors.unauthorized') }, status: :unauthorized end end