Authority provides a sensible, ORM-neutral way to authorize actions on your Rails models.

But what if you need to authorize something for which there is no model, like access to a stats page? The new “generic can?” feature takes care of that nicely – just don’t overuse it.