Added permissions using CanCan