Add cancan gem
Define user roles (viewer, editor, admin)
Define permissions and restrict actions