Implemented Pundit for role and permission control