declarative_authorization is a Rails plugin for authorization based on readable authorization rules.