I’m using the account_location plugin and have got it setup OK so that
when I view the index action in my controller, the objects displayed
are those restricted to that account (done by an account_id attribute
on the model).
My problem is that when I move on to the show action e.g. objects/1 I
can change the id and access an object that doesn’t belong to that
I know I can fix this on an action by action basis but thought there
must be a DRY way of doing this. All help appreciated.