Grant or revoke access to your ActiveRecord models