Add auth in all controllers

app/controllers/completions_controller.rb

@@ -4,10 +4,14 @@ class CompletionsController < ApplicationController
   before_action :set_completion, only: %i[ destroy edit update ]
 
   def edit
+    authorize @contest
+
     @title = "Edit completion"
   end
 
   def new
+    authorize @contest
+
     @completion = Completion.new
     if params[:contestant_id]
       @completion.contestant_id = params[:contestant_id]
@@ -16,6 +20,8 @@ class CompletionsController < ApplicationController
   end
 
   def create
+    authorize @contest
+
     @completion = Completion.new(completion_params)
     @completion.contest_id = @contest.id
     if @completion.save
@@ -29,6 +35,8 @@ class CompletionsController < ApplicationController
   end
 
   def update
+    authorize @contest
+
     if params[:contestant_id]
       @completion.contestant_id = params[:contestant_id]
     end
@@ -41,6 +49,8 @@ class CompletionsController < ApplicationController
   end
 
   def destroy
+    authorize @contest
+
     @completion.destroy
     if params[:contestant_id]
       redirect_to contest_contestant_path(@contest, params[:contestant_id])