I think we need to pass the CanCan error on if it doesn't fit either of these cases. For instance, what if someone tries to do the make_admin action and they don't have privileges? I believe with the current implementation they would see the "only_group_coordinator_remove_admin" error.

@HSalmon I'm happy to help you out with this if you have a moment this afternoon.