Require the current user to be the owner for actions.
The actions
* show
* edit
* update
* delete
now require the current user to be the owner of the respective entity. The index action is already protected.
Resolves #1.