Active protect on change dossier state tool with admin email verification

app/controllers/admin/change_dossier_state_controller.rb

@@ -10,5 +10,10 @@ class Admin::ChangeDossierStateController < AdminController
 
   def check
     @dossier = Dossier.find(params[:dossier][:id])
+
+    unless @dossier.procedure.administrateur.email == current_administrateur.email
+      flash.alert = 'Dossier introuvable'
+      return redirect_to admin_change_dossier_state_path
+    end
   end
 end