Bobby is all about guarding the access to actions on controllers and model instances on your Rails projects, and requires you to setup some authentication regime in advance - like Devise, Authlogic et al - with a User model, and preferably a GroupUser and GroupUsersUsers models too.