# app/abilities/member_ability.rb
class MemberAbility
  include CanCan::Ability

  attr_accessor :current_user

  def initialize current_user, options = {}
    can :update, User do |user|
      user.email == current_user.email
    end

    can :update, Profile do |profile|
      profile.owners.include? current_user
    end
  end
end