Implemented Pundit and todo policy