Use cancan.