Refactored proposal. Enabled cancancan

maybe negate via `except` ?