Finish moving permission logic to ability.