Ask A Question

Notifications

You’re not receiving notifications from this thread.

How to prevent users from view other user profile or data ?

gurupal singh asked in Rails

I have created 2 users (using devise gem) and added data in both the profiles, but both users can see each others data and profiles. How to stop users to access or see other users profiles

Reply

What does your controller look like for the action? You should be using the Devise helper method current_user.

For example, don't do this:

def show
  @user = User.find(params[:id])
end

Instead, do this:

def show
  @user = current_user
end
Reply
Join the discussion
Create an account Log in

Want to stay up-to-date with Ruby on Rails?

Join 87,400+ developers who get early access to new tutorials, screencasts, articles, and more.

    We care about the protection of your data. Read our Privacy Policy.