pundit (rubygems): Object oriented authorization for Rails applications
Keywords: ruby