instante-social/app/policies/settings_policy.rb