finish core mechanics and links

app/controllers/users_controller.rb

@@ -5,7 +5,15 @@ class UsersController < ApplicationController
   # GET /users
   # GET /users.json
   def index
-    @users = User.all
+    if logged_in?
+      if current_user.admin
+        @users = User.all
+      else
+        redirect_to home_path
+      end
+    else
+      redirect_to home_path
+    end
   end
 
   # GET /users/1
@@ -52,11 +60,20 @@ def update
   # DELETE /users/1
   # DELETE /users/1.json
   def destroy
-    @user.destroy
-    respond_to do |format|
-      format.html { redirect_to users_url, notice: 'User was successfully destroyed.' }
-      format.json { head :no_content }
+    if logged_in?
+      if current_user.admin
+        @user.destroy
+        respond_to do |format|
+          format.html { redirect_to users_url, notice: 'User was successfully destroyed.' }
+          format.json { head :no_content }
+        end
+      else
+        redirect_to home_path
+      end
+    else
+      redirect_to home_path
     end
+
   end
 
   private

app/views/people/approve_comments.html.erb

@@ -1,9 +1,18 @@
-<% @comments.each do |comment| %>
-	<p>
-		<%= comment.name %></br>
-		<%= comment.body %></br>
-		<%= comment.approved %></br>
-		<%= button_to "Destroy", person_comment_path(comment.person_id, comment.id), method: :delete, data: { confirm: 'Are you sure?' } %>
-		<%= button_to "Approve", person_comment_approve_path(comment.person_id, comment.id), method: :put %>
-	</p>	
-<% end %>
+<% if current_user.person_id == @person.id %>
+	<% if @comments.count != 0 %>
+	<% @comments.each do |comment| %>
+		<p>
+			<%= comment.name %></br>
+			<%= comment.body %></br>
+			<%= comment.approved %></br>
+			<%= button_to "Destroy", person_comment_path(comment.person_id, comment.id), method: :delete, data: { confirm: 'Are you sure?' } %>
+			<%= button_to "Approve", person_comment_approve_path(comment.person_id, comment.id), method: :put %>
+		</p>	
+	<% end %>
+	<% else %>
+		<p> No new comments.</br>
+			<%= link_to "Back", 'javascript:history.go(-1);' %>
+		</p>
+
+	<% end %>
+<%end%>

app/views/people/show.html.erb

@@ -4,9 +4,13 @@
 	<%= @person.bio %></br>
 	<%= @person.link%></br>
 	<%= image_tag @person.image.url(:thumb) %>
-	<%= link_to 'Edit Profile', edit_person_path(@person) %>
-	<%= link_to 'Destroy', @person,  method: :delete, data: { confirm: 'Are you sure?' } %>
-	<%= link_to 'Back', home_path %>
+	<% if !current_user.nil? && current_user.person_id == @person.id %>
+		<%= link_to 'Edit Profile', edit_person_path(@person) %>
+		<%= link_to 'Destroy', @person,  method: :delete, data: { confirm: 'Are you sure?' } %>
+		<%= link_to "Approve Comments", approve_the_comments_path(@person) %>
+	<% end %>
+
+	<%= link_to 'Back', 'javascript:history.go(-1);' %>
 </p>
 <% @comments.each do |comment| %>
 	<p>	

config/routes.rb

@@ -1,11 +1,11 @@
 Rails.application.routes.draw do
-  root :to => 'users#index'
+  root :to => 'static_pages#home'
 	resources :user_sessions
 	resources :users
 
 	get 'login' => 'user_sessions#new', :as => :login
 	post 'logout' => 'user_sessions#destroy', :as => :logout
-	get '/people/:person_id/approve_comments' => 'people#approve_comments'
+	get '/people/:person_id/approve_comments' => 'people#approve_comments', :as => 'approve_the_comments'
 
 	get 'home' => 'static_pages#home'
 

db/migrate/20150924005047_add_admin_column_to_users.rb

@@ -0,0 +1,5 @@
+class AddAdminColumnToUsers < ActiveRecord::Migration
+  def change
+    add_column :users, :admin, :boolean, :default =>false
+  end
+end

db/schema.rb

@@ -11,7 +11,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema.define(version: 20150924000916) do
+ActiveRecord::Schema.define(version: 20150924005047) do
 
   create_table "comments", force: :cascade do |t|
     t.string   "name"
@@ -36,13 +36,14 @@
   end
 
   create_table "users", force: :cascade do |t|
-    t.string   "email",                        null: false
+    t.string   "email",                            null: false
     t.string   "crypted_password"
     t.string   "salt"
     t.datetime "created_at"
     t.datetime "updated_at"
     t.integer  "person_id"
     t.integer  "sessions",         default: 0
+    t.boolean  "admin",            default: false
   end
 
   add_index "users", ["email"], name: "index_users_on_email", unique: true