ensl.org/app/controllers/options_controller.rb

class PollsController < ApplicationController
  before_action :get_poll, except: [:index, :new, :create]
  respond_to :js

  def add
  end

  def create
    @poll = Poll.new(Poll.params(params, cuser))
    @poll.user = cuser
    raise AccessError unless @poll.can_create? cuser

    if @poll.save
      flash[:notice] = t(:polls_create)
      redirect_to @poll
    else
      render :new
    end
  end

  def update
    raise AccessError unless @poll.can_update? cuser

    if @poll.update_attributes(Poll.params(params, cuser))
      flash[:notice] = t(:polls_update)
      redirect_to @poll
    else
      render :edit
    end
  end

  def destroy
    raise AccessError unless @poll.can_destroy? cuser
    @poll.destroy
    redirect_to polls_url
  end

  private

  def get_poll
    @poll = Poll.find params[:id]
  end
end