begin limiting partner's access in partner_ability.rb