Adding to rating works.  Security trying internal and put Dave on as the only user allowed to see Stories controller