List most of permissions and update ability.rb accordignly
TODO fix views and controllers accordingly