Cancan

Here is the CanCan implementation.