User - cancan abstract resource authorization

user.rb

class User < ActiveRecord::Base

    has_and_belongs_to_many :associates,
      :class_name => "User",
      :join_table => "connections",
      :association_foreign_key => "connection_user_id"

end