caveat has_valid_ip(user_ip ipaddress, allowed_range string) { user_ip.in_cidr(allowed_range) }