Oh, cancan is alive? Cool. I already looked at the old CanCan repo and it's the best looking library for inspiration I've found so far. Maybe I should dig deeper to see how more complex authorization rules are handled.