def permitted_to? (privilege, object_or_sym = nil, options = {}, &block)
      controller.permitted_to?(privilege, object_or_sym, options, &block)
    end
def permitted_to? (privilege, object_or_sym = nil, options = {}, &block)
      controller.permitted_to?(privilege, object_or_sym, options, &block)
    end
If the current user meets the given privilege, permitted_to? returns true
 and yields to the optional block.  The attribute checks that are defined
 in the authorization rules are only evaluated if an object is given
 for context.

 Examples:
     <% permitted_to? :create, :users do %>
     <%= link_to 'New', new_user_path %>
     <% end %>
     ...
     <% if permitted_to? :create, :users %>
     <%= link_to 'New', new_user_path %>
     <% else %>
     You are not allowed to create new users!
     <% end %>
     ...
     <% for user in @users %>
     <%= link_to 'Edit', edit_user_path(user) if permitted_to? :update, user %>
     <% end %>

 To pass in an object and override the context, you can use the optional
 options:
     permitted_to? :update, user, :context => :account