optimize cancan rights