gistfile1.rb

  def access_own_records
    return if @user.super_administrator?
    # Anyone can read or update anything they create
    [Appointment, Claim, Referral, Study].each do |model|
      can([:edit, :index, :read, :update], model,
          model.where(created_id: @user.id)) do |instance|
        instance.created_id == @user.id
      end
    end
  end