activate do
  Dummy.instance_eval do
    protect do
      scope { where }
      can :read, :string