Using RailsAdmin without devise

rails_admin_without_devise.md

Using rails_admin without devise

Having a buckload of code to authorize users on your application is something you may like or not. Speaking for myself I hate it. But I still love rails_admin, here's how you install it without devise. Thanks to phoet for providing the hints in the gist I have forked from.

Add RailsAdmin to your Gemfile

do NOT add devise

gem "rails_admin", :git => "git://github.com/sferik/rails_admin.git"
gem "fastercsv", :platform => :ruby_18

Run Bundler

bundle install

Run the generator for RailsAdmin

rails g rails_admin:install

Remove everything you do not need e.g. migrations or config/locales/devise* Cleanup the Gemfile and routes.rb etc

Migrate the history entity

rake db:migrate

Create an initializer for your own admin authorization code

In config/initializers/rails_admin.rb:.

class FakeUser
  def self.username
    'admin'
  end

  def self.email
    '[email protected]'
  end
end

RailsAdmin.config do |config|
  config.current_user_method { FakeUser }
  config.main_app_name { ['Recommended Games', 'Admin'] }
  config.authenticate_with{}
end

This doesn't seem to work. When the HTTP Basic authentication box appears, pressing cancel without providing any credentials grants access to rails_admin. I fixed it by doing the following:

In config/initializers/rails_admin.rb:

RailsAdmin.config do |config|
  config.authorize_with do
    authenticate_or_request_with_http_basic('Site Message') do |username, password|
      username == 'foo' && password == 'bar'
    end
  end

  # rest of configuration

end

Thanks for the tip, updated it :)

This did not work for me. Here is my code:

RailsAdmin.config do |config|
  config.authorize_with do
    authenticate_or_request_with_http_basic('Site Message') do |username, password|
      username == ENV["ADMIN_KEY"] && password == ENV["ADMIN_PASSWORD"]
    end
  end  
  config.actions do
    dashboard                     # mandatory
    index                         # mandatory
    new
    export
    bulk_delete
    show
    edit
    delete
    show_in_app
  end
  config.main_app_name { ['grade-system', 'Admin'] }
end

but how to logout with this authentication?

This works well locally but doesn't seem to work with Heroku.
It doesn't break, but the /admin page bypasses the authorization window completely when accessed after being deployed to Heroku.
I may be deploying wrong.. Any tips?

How to add a normal authentication (not basic authentication) for rails admin. I have created a dedicated model Admin, apart from user table. Any tips?