A visitor can only view the index or show page of an auction