the before filter is at the controller level, in the index action itself, i have guardian.ensure_can_see!(Activity), which allows only admins to see the activities.