I\'m using Rails 3 with Devise for user auth. Let\'s say I have a User model, with Devise enabled, and a Product model, and that a User has_many Products.
In my Products
I like to do this as follows:
class Product scope :by_user, lambda { |user| where(:owner_id => user.id) unless user.admin? } end
this allows you to write the following in your controller:
Product.by_user(current_user).find(params[:id])