master
initialize
def initialize(user) user ||= User.new # guest user (not logged in) if user.role? "admin" can :manage, :all end