I'm not sure what you're envisioning?  Something like SystemGroup.all_editable?(array_of_groups)   or SystemGroup.assert_all_editable(array_of_groups)  ?  

We don't currently enforce authorization at the model level, its typically in the rules function of a controller.  While i was working on this it became more apparent that it needed its own filter though.