A snapshot of PetroFeed's authorization code

ability.rb

class Ability
  include CanCan::Ability

  def initialize(user)
    @user = user || User.new # guest user (not logged in)

    authorize_payment_limits

    # Other access code
  end

  private

    def authorize_payment_limits
      if follow_limit_reached?
        cannot :follow, Well
      else
        can :follow, Well
      end
    end

    def follow_limit_reached?
      !@user.pro? && @user.follow_count >= FOLLOW_LIMIT
    end
end

Really clean and well thought out. I love it.

One thing, can you simply do this instead:

can :follow, Well unless follow_limit_reached?