CanCan is a simple authorization plugin that offers a lot of flexibility. See how to use it in this episode.

Read more at the source