added dashboard restrictions and user roles for cancan.