[API] Respect CanCan.