gistfile1.rb

class BooksController < ApplicationController
  def create
    @book = Book.new(book_params)

    respond_to do |format|
      if @book.save
        format.html { redirect_to @book, notice : 'Book was successfully created.' }
      else
        format.html { render action : "new" }
      end
    end
  end

  def update
    @book = Book.find(params[:id])

    respond_to do |format|
      if @book.update_attributes(book_params)
        format.html { redirect_to @book, notice : 'Book was successfully updated.' }
      else
        format.html { render action : "edit" }
      end
    end
  end


  private

  def book_params
    if current_user && current_user.admin?
      params[:book].permit(:name, :author, :public)
    else
      params[:book].permit(:name, :author)
    end
  end
end