Enhances Pundit with roles, allows definition of attribute and association level authorization
Pundit