#model
def accesscheck
  user.permissions.find(:conditions=>["action=#{action} and controller=#{controller}"])
end

#controller
  def getperms
    if user = session[:user_id]==nil
          flash[:notice]="please log in"
          redirect_to(:controller=>"login", :action=>"login")
        else
           user = User.find(session['user_id'])
      if user && user.accesscheck
        render(:controller, :action)
      else
        redirect_to :action=>'deny_access'
          end
        end
  end

# log
Parameters: {"action"=>"index", "controller"=>"admin"}
SELECT * FROM users WHERE (users.id = 4) LIMIT 1[0m


ActiveRecord::RecordNotFound (Couldn't find User without an ID):