Role-based authorization in Rails
The post argues that CanCan makes permissions easy but encourages duplicated rules and repeated overrides, and presents Access Granted as a role-based alternative with inheritance, dynamic checks, and controller protection.
