cancancan

CanCanCan is an authorization library for Ruby and Ruby on Rails which restricts what resources a given user is allowed to access.