Add auth in all controllers

app/policies/completion_policy.rb

@@ -0,0 +1,9 @@
+class CompletionPolicy < ContestPolicy
+  def index?
+    false
+  end
+
+  def show?
+    false
+  end
+end

app/policies/contest_policy.rb

@@ -0,0 +1,29 @@
+class ContestPolicy < ApplicationPolicy
+  def index?
+    true
+  end
+
+  def show?
+    record.user.id == user.id || user.admin?
+  end
+
+  def new?
+    true
+  end
+
+  def create?
+    true
+  end
+
+  def edit?
+    record.user.id == user.id || user.admin?
+  end
+
+  def update?
+    record.user.id == user.id || user.admin?
+  end
+
+  def destroy?
+    record.user.id == user.id || user.admin?
+  end
+end

app/policies/contestant_policy.rb

@@ -0,0 +1,9 @@
+class ContestantPolicy < ContestPolicy
+  def index?
+    false
+  end
+
+  def show?
+    false
+  end
+end

app/policies/puzzle_policy.rb

@@ -0,0 +1,9 @@
+class PuzzlePolicy < ContestPolicy
+  def index?
+    false
+  end
+
+  def show?
+    false
+  end
+end