Scope-based authorization for Ruby on Rails.