oh... inherited resources, cancan, problem with access