extract current_user.owns? method