tweaked cancan permission for Quantity