Enforcing Public/Private Access in Rails | Hacker News Reader