tab/app/models/ability.rb

class Ability
  include CanCan::Ability

  def initialize(user)
    return unless user

    can :manage, :all if user.penning?
    can :read, user, id: user.id
    can :create, Transaction, debtor: user
  end
end