Use Guardian's Permissions https://hexdocs.pm/guardian/Guardian.Permissions.html
https://github.com/dolfinus/arkenston-backend/blob/8b0d2f0a64ea4972abbf0f824c8d423f4532fbf4/config/config.exs#L81-L126