How to disable actions on the user's personal page?

Question

Ruby on Rails

Hello everyone) There is a personal user profile. This profile has a button to add a product. I don't know how to prevent other registered users from adding a product on someone else's profile page? I did the whole authentication system with Devise. Thanks for the help)

Answer 1

If I understand the question correctly, then you need authorization in the application. And for this, rails has two wonderful gems Pundit and CanCanCan .
I also recommend watching the Authorization with CanCan screencast .