can [:read], Phrase
      can [:manage], User, client_id: user.client_id
      can [:manage], User, client_id: nil
      can [:manage], Claim, orcid: user.uid
    elsif user.role_id == "client_user"