Implemented pundit for list authorization