use ActiveRecordPermissions.current_user_method instead of current_user