gistfile1.rb

class RoleSets
  role :admin do
    can :manage, :all
  end
  
  role :diretoria do
    can [:read, :edit], [Post]
  end
  
  role :maluco do
    can [:update], [Post]
  end
end
# =========================================================================================================

class Ability < RoleSets
  include CanCan::Ability  
  
  def initialize(user)  
    user ||= User.new  
  
    if user.role? :admin  
      role_admin
    else
      #can :read, :all
      if user.role?(:diretoria)  
        role_diretoria
      elsif user.role?(:maluco)
        role_diretoria
        role_maluco
      end  
    end  
  end  
end