Cancan: ability to manage resources