Rails authorization for data-centric applications based on ActiveRecord.