app.rb

class ApplicationController < ActionController::Base
  # Prevent CSRF attacks by raising an exception.
  # For APIs, you may want to use :null_session instead.
  protect_from_forgery with: :exception

  before_filter :authenticate_admin!
  default_scope { where(company_id = current_admin.company_id ) }
end

gistfile1.txt

I'm making a site,
which i want to add different companies,
but they should not be allowed to see each other.
How can i solve/do this?