```ruby
class LocSearchController < ApplicationController
  def index
    if params[:page].to_i <= 0
      page = 1
    else
      page = params[:page].to_i
    end
    @query = params[ :query ].to_s.strip
    books = LocSearch.search( @query, { :page => page } )
    @books = Kaminari.paginate_array(
      books[:items],
      :total_count => books[ :total_entries ],
      :page => page
    ).page( page ).per( 10 )
    respond_to do |format|
      format.html
    end
  end

  def create
    begin
      @manifestation = LocSearch.import_from_sru_response(params[:book][:lccn])
    rescue EnjuLoc::RecordNotFound
    end
    respond_to do |format|
      if @manifestation.try(:save)
        flash[:notice] = t('controller.successfully_created', :model => t('activerecord.models.manifestation'))
        format.html { redirect_to manifestation_items_url(@manifestation) }
      else
	if @manifestation and not @manifestation.valid? 
	  flash[:notice] = @manifestation.errors.messages
	else
          flash[:notice] = t('enju_loc.record_not_found')
	end
        format.html { redirect_to loc_search_index_url }
      end
    end
  end
end
```

Add a check if user is logged in and has a Librarian role.
user
```ruby
class LocSearchController < ApplicationController
  before_filter :authenticate_user!
  before_filter :check_librarian
  
  def index
    if params[:page].to_i <= 0
      page = 1
    else
      page = params[:page].to_i
    end
    @query = params[ :query ].to_s.strip
    books = LocSearch.search( @query, { :page => page } )
    @books = Kaminari.paginate_array(
      books[:items],
      :total_count => books[ :total_entries ],
      :page => page
    ).page( page ).per( 10 )
    respond_to do |format|
      format.html
    end
  end

  def create
    begin
      @manifestation = LocSearch.import_from_sru_response(params[:book][:lccn])
    rescue EnjuLoc::RecordNotFound
    end
    respond_to do |format|
      if @manifestation.try(:save)
        flash[:notice] = t('controller.successfully_created', :model => t('activerecord.models.manifestation'))
        format.html { redirect_to manifestation_items_url(@manifestation) }
      else
	if @manifestation and not @manifestation.valid? 
	  flash[:notice] = @manifestation.errors.messages
	else
          flash[:notice] = t('enju_loc.record_not_found')
	end
        format.html { redirect_to loc_search_index_url }
      end
    end
  end

  private
  def check_librarian
    unless current_user.try(:has_role?, 'Librarian')
      access_denied
    end
  end
end
```
assistant