Refactored pundit permissions to be a bit more clean.