Auditcontroller.rb

gistfile1.rb

class AuditsController < ApplicationController
  before_action :authenticate_user!, except: [:index, :show]
  before_action :correct_user, only: [:edit, :update, :destroy]
  before_action :set_audit, only: [:show, :edit, :update, :destroy]
  
.  
.  
.
.
.
.


   def correct_user
      @audit = current_user.audit.find_by(id: params[:id])
      redirect_to audits_path, notice: "Not authorized to edit this Test" if @audit.nil?
    end