Simple role-based access control in Ruby