ruby version of yii's rbac