$self->model("book")->all_except_deleted]
})
->granted(sub ($books) {
$self->render(json => $books)
})
->denied(sub() {
$self->render(status => 401, text => 'unauthorized')
f->model("book")->get($self->param('id'))
})
->granted(sub ($book) {
$self->render(json => $book)
})
->denied(sub () {
$self->render(status => 401, text => 'unauthorized')
ram('id'))
})
->granted(sub ($book) {
$book->update($self->req->body->json);
$self->render(json => $book)
})
->denied(sub () {
$self->render(status => 401, text => '