1. Make controller permissions restrictive. 2. Add Array.wrap around the resources. 3. In security policy rename "resource" to "can". 4. Remove NotLoggedIn exception.
1. Rename current_user_permissions to current_permissions; 2. Remove duplicated access filtering logic.
Add cannot? helper
Fix more ToDos
Add a module for securityPolicy to the gem