title: Adding security on routes in Rails
body: <p>In Rails 2, how can I prevent a user from just changing the id # and accessing other Objects?</p>
  
  <p>For example :</p>
  
  <pre><code>website.com/users/1231/edit
  </code></pre>
  
  <p>How do I prevent a user from changing the <code>1231</code> and accessing another account?</p>