• Example authorizations for cancan: