Rails authorization with CanCanCan
sitepoint.com