master
class Ability include CanCan::Ability def initialize(user) user ||= User.new if user.admin? can :access, :admin can :manage, :all else can :read, :all end end end