Fixing some cancan permission issues… i think

We weren't properly checking for scoped the permissions... Fix seems inefficient, but it works....