RoR, devise, príspevky

def enforce_ownership(object)
 send_unauthorized unless validate_ownership(object)
end
def send_unauthorized
 render :text => "You are not authorized.", :status => :unauthorized
end
private
 def validate_ownership(object)
  signed_in? && (is_admin? || (object == current_user || object.user == current_user))
 end
end

def edit
 enforce_ownership(@post)
end