It's cancan, not Authlogic. Cf. https://github.com/innoq/iqvoc/blob/master/app/controllers/concepts/hierarchical_controller.rb#L58

Ping if you need any more help.