Created a module concern for what users are able to see.

We should probably use `roles` instead of `affiliations` because roles will always be an array of symbols.
Which means we should also compare using symbols instead of strings.