Pallav_bfs wrote in post #1044557:
Hello,I am quite new on rails. Currently making CRUD apps in rails 3.0
I've used devise [1.1.rc0] for authentication.In those apps any logged
in user can change other user's details.
How can I design the app, so that any logged in user can edit/remove
his details only if he wishes to do so and can only view others'
After logging in he should be directed to his own page,where his
details are stored.He can only Update and Delete any of his details
there.But can only View the main page where his record will be kept
with other records.He should be able to remove or edit others'
Take a look at one of the authorization frameworks such as CanCan: