rails-authorization-plugin

Different from authentication - it provides granular access and is designed to work with other authentication systems