location controller

app/controllers/locations_controller.rb

@@ -0,0 +1,14 @@
+class LocationsController < ApplicationController
+  before_action :authenticate_user!
+  before_action :authenticate_scope!
+
+  def new
+    @location = Location.new
+  end
+
+private
+
+  def authenticate_scope!
+    head :unauthorized and return unless current_user.data_coordinator? || current_user.support?
+  end
+end