people_controller.rb

class PeopleController < ApplicationController
  before_filter :authenticate_user!, :except => [:index, :show]
...
end

people_controller_spec.rb

describe PeopleController do
  include Devise::TestHelpers
...
  describe "disallow member-only actions when not logged in (guest/unprivileged)" do
    let(:person) { Factory.create(:person) }
    after { response.should redirect_to new_user_session_path }
    
    it { get :new }
    it { get :edit, :id => person }
    it { post :create, :person => FactoryGirl.attributes_for(:person) }
    it { put :update, :id => person, :person => {'these' => 'params'} }
    it { delete :destroy, :id => person }
    it { post :create_thing, :id => person, :what => 'stuff' }
  end
end