not there yet, but closer. Notice user_allowances method in application controller.