<div id="content-wrapper">
  <div id="single-column-wrapper">
    <div id="content">
      <p id="notice"><%= notice %></p>
      
      <p>
        <strong>First name:</strong>
        <%= @user.first_name %>
      </p>
      
      <p>
        <strong>Last name:</strong>
        <%= @user.last_name %>
      </p>
      
      <p>
        <strong>Email:</strong>
        <%= @user.email %>
      </p>
      
      <%= link_to 'Edit', edit_profile_path(@user) %> |
      <%= link_to 'Back', users_path %>
    </div>
  </div>
</div>

<div id="content-wrapper">
  <div id="single-column-wrapper">
    <div id="content">
      <p id="notice"><%= notice %></p>
      
      <p>
        <strong>First name:</strong>
        <%= @user.first_name %>
      </p>
      
      <p>
        <strong>Last name:</strong>
        <%= @user.last_name %>
      </p>
      
      <p>
        <strong>Email:</strong>
        <%= @user.email %>
      </p>
      
      <%= link_to 'Edit', edit_profile_path(@user) %> 
      <% if can? :index, @user %>
      | 
      <%= link_to 'Back', users_path %>
      <% end %>
    </div>
  </div>
</div>

Add cancancan access control to users/show view.
Add cancancan access control to users/show view.
