Fix authorization

app/views/layouts/_admin_sidebar.html.haml

@@ -90,6 +90,8 @@
         - if can? :update, Question.new(conference_id: @conference.id)
           %li{:class=> active_nav_li(admin_conference_questions_path(@conference.short_title))}
             = link_to 'Questions', admin_conference_questions_path(@conference.short_title)
+
+  - if (can? :manage, @conference.sponsorship_levels.build) || (can? :manage, @conference.sponsors.build) || (can? :manage, @conference.tickets.build)
     %li
       %a
         %span.fa.fa-usd
@@ -104,12 +106,14 @@
         - if can? :update, @conference.tickets.build
           %li{ class: active_nav_li(admin_conference_tickets_path(@conference.short_title)) }
             = link_to 'Tickets', admin_conference_tickets_path(@conference.short_title)
+
+  - if (can? :manage, @conference.targets.build) || (can? :manage, @conference.campaigns.build)
     %li
       %a
         %span.fa.fa-money
         Objectives
       %ul
-        - if can? :update, @conference
+        - if can? :update, @conference.campaigns.build
           %li{class: active_nav_li(admin_conference_campaigns_path(@conference.short_title))}
             = link_to 'Campaigns', admin_conference_campaigns_path(@conference.short_title)
         - if can? :update, @conference.targets.build

app/views/layouts/_user_menu.html.haml

@@ -21,7 +21,7 @@
     = link_to(destroy_user_session_path, :method=>'delete') do
       %span.fa.fa-minus
       Sign out
-- if can? :index, Conference
+- if can? :manage, Conference
   %li.divider
     %li
       = link_to(admin_conference_index_path()) do