Here's a review of several authorization add-on's for Rails. Whereas "authentication" refers to managing user login credentials, "authorization" is about managing role-based permissions to access specific areas of your site.