[Fixes#70859788] Readjusts permissions at view and controller level, as well as redefining a few in Ability.rb