Thanks a ton for the kind words! I'm not familiar with CanCan-- it looks very expressive. A role based system is a pretty significant departure from our curren

Thanks a ton for the kind words! I'm not familiar with CanCan-- it looks very expressive. A role based system is a pretty significant departure from our current ACL per model approach. I think I need some more input, in the form of practical use cases where ACLs can't do the trick. I'm sure they exist, but we'd need to consider the added complexity of role based access and weigh that against the kinds of apps it would unlock. Regardless I'll spend some more time looking into these libraries.