From ac2dbee62b275ac394ce5c6b98d5347cf81e7627 Mon Sep 17 00:00:00 2001
From: benji <benj_cous@hotmail.com>
Date: Wed, 10 Feb 2016 15:23:16 +0100
Subject: [PATCH] Privacy and stuff

---
 app/controllers/users_controller.rb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
index 6cb6f63..ef6b866 100644
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -8,6 +8,7 @@ class UsersController < ApplicationController
 
   def show
     @user = User.find_by(name: params[:id]) || User.new
+    authorize! :read, @user
     respond_to do |format|
       format.html { @transaction = Transaction.new }
       format.json { render json: @user }