Check using privileged_access_by? instead of editable_by?