Refactor actions and negated actions from have_permission_to to resource