Check card access permission by cancan