fixed some bogons re security checks relying on renamed methods; mino…

…r ui tweaks

app/controllers/users_controller.rb

@@ -10,7 +10,7 @@ def index
         format.html # index.html.erb
         format.json { render json: @users }
       else
-        format.html { redirect_to root_path, notice: no_peeking }
+        format.html { redirect_to root_path, notice: "No peeking at other people's stuff!" }
       end
     end
   end
@@ -19,7 +19,7 @@ def index
   # GET /users/1.json
   def show
     @user = User.find(params[:id])
-    check_access @user
+    return if ! can_access @user
 
     respond_to do |format|
       format.html # show.html.erb
@@ -31,7 +31,7 @@ def show
   # GET /users/new.json
   def new
     @user = User.new
-    check_access @user
+    return if ! can_access @user
 
     respond_to do |format|
       format.html # new.html.erb
@@ -42,14 +42,14 @@ def new
   # GET /users/1/edit
   def edit
     @user = User.find(params[:id])
-    check_access @user
+    return if ! can_access @user
   end
 
   # POST /users
   # POST /users.json
   def create
     @user = User.new(params[:user])
-    check_access @user
+    return if ! can_access @user
 
     respond_to do |format|
       if @user.save
@@ -66,7 +66,7 @@ def create
   # PUT /users/1.json
   def update
     @user = User.find(params[:id])
-    check_access @user
+    return if ! can_access @user
 
     respond_to do |format|
       if @user.update_attributes(params[:user])
@@ -83,7 +83,7 @@ def update
   # DELETE /users/1.json
   def destroy
     @user = User.find(params[:id])
-    check_access @user
+    return if ! can_access @user
     @user.destroy
 
     respond_to do |format|

app/helpers/application_helper.rb

@@ -6,7 +6,7 @@ def can_access obj
     else
       respond_to do |format|
         format.html { redirect_to root_path,
-                      notice: 'No peeking at other people\'s stuff!' }
+                      notice: "No peeking at other people's stuff!" }
       end
       false
     end

app/views/layouts/application.html.erb

@@ -10,8 +10,8 @@
   <div align="center">
     <%= render "devise/menu/make_or_edit_registration_links" %> | <%= render "devise/menu/log_in_or_out_links" %>
     <h1 align="center"><%=title%></h1>
-    <p class="notice"><%= notice %></p>
-    <p class="alert"><%= alert %></p>
+    <% if notice %><h2 class="notice"><%= notice %></h2><% end %>
+    <% if alert %><h2 class="alert"><%= alert %></h2><% end %>
 
     <%= yield %>
   </div>