users can flag posts as spam

Shouldn't this be only: destroy and index?