Jeremy Stretch
Leveraging the ORM to enforce object-level permissions