See http://www.writertopia.com/developers/authorization for details. The test apps, particularly the full-feature object_roles_test app, can be used to jumpstart a Rails app with authentication and authorization.