CanCan extension with role oriented permission management, rules caching and much more - View it on GitHub