class UsersController < ApplicationController before_action :set_user before_action :validate_current_user, except: [:show] def show; end def edit; end def update if @user.update(user_params) redirect_to user_path(@user), notice: "Saved trainer card." else render :edit, status: :unprocessable_entity end end protected def set_user @user = User.find(params[:id]) end def validate_current_user redirect_to user_path(current_user) unless @user == current_user end def user_params params.require(:user).permit(:name) end end