yes, you're right.  I think load_and_authorize_resource already covers me.