It would be nice not having to call authorize! in every controller method. Do you have any plans to include this functionality? I'm curious, how much work/how complicated is it? I might be out of my depth, but I'm willing to give it a crack if you think it's useful, and if I can get some guidance.