you should use cancan for this purpose (this can be done in future)