Fixed #23 with lots of current_user_can checks