product model default_scope and cancan problem