Mass assignment security based on cancan abilities