It's not a permissions thing. It makes sense to send users to different locations based on their role (i.e user, creator, guest). I think that maybe extracting the redirection to a private method with a good name (`redirect_based_on_role`) might help.