[hopsoft]

I do like the access-granted DSL. It seems to address some of CanCan's problems on larger more complex projects. Also... if you prefer a more OO style, I wrote a 50 line authorization lib that has proved workable on some of my larger projects. https://github.com/hopsoft/perm

[jph]

Nice work - your OO style and wrapper is well done. And the OO style makes it easier to do dynamic roles, such as DCI.