CanCan has a shortcut permission called `:manage` that allows all actions. Use it here to be more concise.