Simon Says Authorizer

application_controller.rb

class ApplicationController < ActionController::Base
  include SimonSays::Authorizer

  self.default_authorization_scope = :current_user
end

documents_controller.rb

class DocumentsController < ApplicationController
  authenticate :user

  find_and_authorize :documents, :edit, through: :memberships, only: [:edit, :update]
  find_and_authorize :documents, :delete, through: :memberships, only: :destroy
end

reporters_controller.rb

class ReportsController < ApplicationController
  authorize_resource :admin, :support
  
  find_resource :report, from: :current_admin, except: [:index, :new, :create]
end

routes.rb

resources :documents
resources :reports