Question

I have two Models:

Users, and Articles

Every user is able to create an article but can only edit his own Articles?

Can someone provide an example of that? (Model, Controller and View Please?)

Thanks

EDIT

I do not want the whole code. I can get the most of the code using scaffolding. I need the modifications that I have to do to achieve that. My biggest concern is how to allow only the author of an article to edit it. That’s what I am asking.

Answer 1

Assuming an Article belongs_to :user and you have an authentication setup that gives you a current_user method, you should be able to do something like this in your ArticlesController:

def edit
  @article = Article.find(params[:id])

  if @article.user == current_user
    render :edit
  else
    flash[:alert] = "You don't have permission to edit this article."
    redirect_to some_path
  end
end

You would also need something similar for your update method.