Set user permisstion with Pundit