As a student, I want to be the only one allowed to add, edit, or remove projects so that I can have peace of mind that I won’t lose my work from someone else.

[jbraseth]

This implies user ownership and access control of Projects. Not a requirement, but a good feature!

[jbraseth]

You can start here https://human-se.github.io/rails-demos-n-deets-2020/demo-authorization/

[jbraseth]

Subtasks

• Use cancan gem https://github.com/ryanb/cancan
• http://railscasts.com/episodes/192-authorization-with-cancan?autoplay=true
• https://stackoverflow.com/questions/17433546/how-do-i-make-it-so-that-a-user-can-only-edit-view-items-belonging-to-them-using