I think only Admin can do this.

So add a global `can :read, Tag` above `if user && user.class.name === 'Users::Admin'` and remove this line plus the member one.