you probably want there to be a current user check inside of a before action. look at before_actions here http://guides.rubyonrails.org/action_controller_overview.html