Having people not get to the edit page unless authorized

Nothing

Nothing to add

This prohibits unauthorized edits

This is in app> application_controller.rb
 class ApplicationController < ActionController::Base
  protect_from_forgery

  private

  def current_user
    if session[:user_id]
      if @current_user.nil?
        @current_user = User.find(session[:user_id])
      end
    end

    return @current_user
  end

  helper_method :current_user
end


##This is in the cases_controller
 
 def edit
    @case = Case.find(params[:id])
    if @case.user != current_user
      flash[:notice] = " You are not authorized to edit"
      redirect_to root_path
    end
  end