cancan vs DB