Setting up ability.rb with jobs permission