0

I have a bootstrapped layout running on my rails app with the ability to allow users to sign up, sign in and sign out. Even changing layouts when they do sign in, to provide a dashboard feel across the nav, as I offer them links they can access to separate pages with forms they can create for work use. However, although users can sign up and log in, any forms they created can be viewed by ANY other user... How do I separate this for privacy? I am new, and this is for a project I am doing in class. Needless to say they left a lot out and keep telling me to google it.. Super stressed out over here! Been at this for 3 days, no sleep. Please help!

V.Nice
  • 275
  • 3
  • 9

1 Answers1

0

Some things to look at:

  • Userstamp - record who created the record(s)
  • Scopes - limit what comes back in a query easily
  • CanCan - easily add authR that will hook in with your existing User model/auth, or you can use Devise, AuthLogic, etc. with it
Gary S. Weaver
  • 7,966
  • 4
  • 37
  • 61