uniq of user_no
add cancan