master
initialize
def initialize(user, request) can :read, :all if request.format == "csv" cannot :read, Candidate