VieTH: Fix authorise admin

app/controllers/admin/application_controller.rb

+class Admin::ApplicationController < ApplicationController
+  before_action :authenticate_admin!
+
+  private
+
+  def authenticate_admin!
+    redirect_to root_path, alert: 'You are not permission.' unless current_user.try(:admin?)
+  end
+end

app/controllers/admin/orders_controller.rb

-class Admin::OrdersController < ApplicationController
+class Admin::OrdersController < Admin::ApplicationController
   before_action :set_order, only: [:show, :update]
-  before_action -> { authorize(@order) }, only: [:show, :update]
 
   def index
     @orders = Order.all.includes(:user).order(created_at: :desc).page(params[:page])

app/controllers/orders_controller.rb

 class OrdersController < ApplicationController
   before_action :authenticate_user!
   before_action :set_order, only: [:show, :update]
-  before_action -> { authorize(@order) }, only: [:show, :update]
+  before_action -> { authorize(@order) }, only: [:show]
 
   def index
     @orders = current_user.orders.includes(:user).order(created_at: :desc).page(params[:page])