Fixing path to administrate view and added permission checks to controller

app/controllers/custom_urls_controller.rb

@@ -1,9 +1,10 @@
 class CustomUrlsController < ApplicationController
   def administrate
+    raise AccessError unless cuser && cuser.admin?
   end
 
   def create
-
+    raise AccessError unless request.xhr?
   end
 
   def show
@@ -15,8 +16,10 @@ class CustomUrlsController < ApplicationController
   end
 
   def update
+    raise AccessError unless request.xhr?
   end
 
   def destroy
+    raise AccessError unless request.xhr?
   end
 end

app/views/about/adminpanel.html.erb

@@ -18,5 +18,6 @@
     <li><%= link_to "Contests", contests_path %></li>
     <li><%= link_to "Challenges", challenges_path %></li>
     <li><%= link_to "Maps", maps_path %></li>
+    <li><%= link_to "Custom Article URLs", custom_urls_path %></li>
   </ul>
 </div>