Before/After Filters

Filters should be implemented so controllers can specify conditions for methods to be dispatched, etc.

class Users < Authenticated
  # the Authenticated super-controller defines the
  # +authenticated?+ method
  before :authenticated?, :except => [:show, :list]
  def update
    # is protected
  end
  def show
    # accessible sans authentication
  end
end

Should accept the :except and :only options for specifying which methods to include for filtering.