access_allow

https://github.com/stevegeek/access_allow

Role- and ability-based authorization for Rails controllers, with a declarative DSL for allow/require rules, named checks and configurable access violations.