@ohadlevy, only a few controllers :require_admin.  In BaseController, there is before_filter :authorize