CanCan configuration for assignments