How to implement security in Rails 3?

Before using Rails 3 for demo purpose, I have to know how Rails 3 implements security.

Java web applications can use Spring Security framework or Apache Shiro framewor开发者_运维知识库k.

Does Rails 3 has something similar?

Security is a high requirement for the demo, I can't ignite the demo unless I know how to implement security for Rails 3 application.

---

It may be worth reading this guide http://guides.rubyonrails.org/security.html

For authentication there are 2 very good solutions: Devise and Authlogic. For authorization I suggest CanCan