I currently authenticate that users can edit their own content only by:
@posts = current_user.posts.find(params[:id])
Is t
Have you checked out aegis? If you are not willing to code something by hand then you can check out aegis. Meets your requirements. It has extensive documentation too. http://github.com/makandra/aegis
See this:
Checking permissions when no user is signed in
Checking permissions