Fixed cancan permission checks.