A simple and very flexible gem/plugin for rails that handles authorization. It requires you to write your own “authorized?” method on your User model (or whatever class you’re authorizing) which allows it to work with ANY type of permissions architecture. http://github.com/shuber/authorization.