rolling events into cancan authorization