Hm, I think the whole concept could be expressed as
```access_denied unless logged_in_as_admin? || @user.present? && @user == current_user```