Simple object-based role authorization in Rails - View it on GitHub