The simplest Ruby permissions system ever