User action permissions
Initial work on conversion to Pundit
Finished conversion to Pundit