I added permissions in the access_permissions.rb.  This is the routes.rb file.