@cirosantilli I already tired with this discussion. 

In current implementation I dont like:
* `UsersGroup#can_be_removed_by` brings ability logic to model.  
* you changes authorization layer in controller. 

I hope its clear now