Users can create posts, view posts, mark posts as spam, view categories

What happens if they are not an admin? http://guides.rubyonrails.org/action_controller_overview.html#filters