[tptacek]

What motivated you to write this rather than to lean on the Rails idioms of setting up authorization-specific associations, and using routes and controllers to express which verbs are allowed?