I recently needed to track user behavior to allow them to update resources but didn’t want them to have to create an account. To accomplish this I built a visitor class and used cancan to manage permissions. I’ve written a short writeup about Managing Resource Ownership Without Creating an Explicit User Account