Changelog 1.0.3 Everything that returns from can :view scope should be restricted if possible. @whitequark