lib/gds-sso/controller_methods.rb in gds-sso-0.7.9 vs lib/gds-sso/controller_methods.rb in gds-sso-0.8.0

@@ -12,9 +12,13 @@
         base.helper_method :current_user
       end
 
 
       def authorise_user!(scope, permission)
+        # Ensure that we're authenticated (and by extension that current_user is set).
+        # Otherwise current_user might be nil, and we'd error out
+        authenticate_user!
+
         if not current_user.has_permission?(scope, permission)
           raise PermissionDeniedException, "Sorry, you don't seem to have the #{permission} permission for #{scope}."
         end
       end