cancancan helper for all action in adv_controller, closed #7