use cancancan
pass the expected argument