ActiveFedora::Base#accessible_by relation to filter results based upon cancan ability and action