tap/app/controllers/barcodes_controller.rb

class BarcodesController < ApplicationController
  load_and_authorize_resource :product
  load_and_authorize_resource :barcode, through: :product, shallow: true

  def create
    @barcode.save
    redirect_to barcode_products_path, notice: "Barcode successfully linked!"
  end

  def show
    render json: @barcode.product
  end

  private

  def barcode_params
    params.require(:barcode).permit(:code)
  end
end