Remove authorize and is_friend? methods from requests controller, use authorize and is_friend? methods in application controller for before_filter on requests/show