CanCan is a simple authorization strategy for Rails which is decoupled from user roles. All permissions are stored in a single location.
Before using CanCan don't forget to create Users either by devise gem or manually. To get maximum functionality of CanCan do create an Admin user.