Object-level authorization database structure in Rails

I'm writing a rails application that has a need for very fine-grained authorization at the object level. Other systems use p开发者_运维知识库lugins such as acl9 or declarative_authorization however I want to implement my own. I have the following database structure in mind and wondered whether this would stray away from rails best-practise.

http://www.pastie.org/2496489

Any pointers/advice or potential problems would be welcome.