You probably need a before_action here (and probably on preview) to prevent non-admin users to delete articles. (And show should probably only show published articles)