I do like the access-granted DSL. It seems to address some of CanCan&#x27;s problems on larger more complex projects. Also... if you prefer a more OO style, I wrote a 50 line authorization lib that has proved workable on some of my larger projects. <a href="https:&#x2F;&#x2F;github.com&#x2F;hopsoft&#x2F;perm" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;hopsoft&#x2F;perm</a>