title: {grape} authorization
body: <p>I'm attempting to create a restful, json api in ruby - so I'm using grape (<a href="https://github.com/intridea/grape" rel="noreferrer">https://github.com/intridea/grape</a>) inside of Rack.
  I'm not using Rails for this project, so cancan, sorcery, etc... don't seem to be the best options. Plus, I'd hate to mix in a bunch of imperative logic into grape's declarative DSL.</p>
  
  <p>While grape has built in authentication support, I do not see anything about authorization. It seems like this would be a common enough use case that this road would have been traveled before, but after some pretty thorough digging in google and the grape codebase itself I have turned up nothing.</p>
  
  <p>Has anyone implemented something like this for their project in grape? What did you use?</p>