CanCan integrated in application. Defined abilities for different user roles.