title: Rails - CanCan - accessible_by
body: <p>Can anyone explain to me how CanCan's <code>accessible_by</code> works?  How does it know what the relationship is between the user and the thing that needs restricting?</p>