Adding authorizations with Pundit