In an ideal world construction projects would be built: on time, within budget, and without unexpected events. Never happens. Why? Three reasons: (#1) mistakes and incompetence, (#2) poor coordination (and communication), and (#3) unexpected events.

I’ve always been in two minds about pundit and cancancan as authorization libraries. Ryan Bates championed the latter, which probably has a lot to do with its success. However, after using both, my conclusions are more fully formed: for simple use cases: both cancancan and pundit work equally well. But, for complex use cases, pundit’s better.