Authorization with simple ruby classes