```ruby
class PostsController < ApplicationController
  # TODO (Shimmy): Define logged_in_user
  # before_action :logged_in_user, only: [:create, :destroy]

  def index
    @group = Group.friendly.find(params[:group_id])
  end

  def new
    @post = Post.new
  end

  # TODO (Shimmy): Watch out for duplicates
  # TODO (Shimmy): Flash success notification on send
  def create
    @group = Group.friendly.find(params[:group_id])
    @post = @group.posts.build(post_params)
    @post.save
  end

  def destroy
  end

  private

    # TODO (Shimmy): Add picture support
  def post_params
    params.require(:post).permit(:title, :content, :user_id, :group_id).merge(user_id: current_user.id)
  end

  # TODO (Shimmy): Use CanCanCan instead.
  def correct_user
    @post = current_user.post.find_by(id: params[:id])
    redirect_to root_url if @post.nil?
  end
end
```

Use create instead of build in create method
user
```ruby
class PostsController < ApplicationController
  # TODO (Shimmy): Define logged_in_user
  # before_action :logged_in_user, only: [:create, :destroy]

  def index
    @group = Group.friendly.find(params[:group_id])
  end

  def new
    @post = Post.new
  end

  # TODO (Shimmy): Watch out for duplicates
  # TODO (Shimmy): Flash success notification on send
  def create
    # TODO (Shimmy): Get rid of the line below this using load_and_authorize_resource from cancancan
    @group = Group.friendly.find(params[:group_id])
    @post.create(post_params)
  end

  def destroy
  end

  private

    # TODO (Shimmy): Add picture support
  def post_params
    params.require(:post).permit(:title, :content, :user_id, :group_id).merge(user_id: current_user.id)
  end

  # TODO (Shimmy): Use CanCanCan instead.
  def correct_user
    @post = current_user.post.find_by(id: params[:id])
    redirect_to root_url if @post.nil?
  end
end
```
assistant