diff --git a/Gemfile b/Gemfile
index 28de950..d53a377 100644
--- a/Gemfile
+++ b/Gemfile
@@ -13,6 +13,8 @@ gem 'devise'
 gem 'omniauth'
 gem 'omniauth-kerberos'
 
+gem 'cancan'
+
 
 # Gems used only for assets and not required
 # in production environments by default.
diff --git a/Gemfile.lock b/Gemfile.lock
index 6987ab4..fd18da1 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -47,6 +47,7 @@ GEM
       slim (~> 1.3.6)
       terminal-table (~> 1.4)
     builder (3.0.4)
+    cancan (1.6.9)
     coderay (1.0.9)
     coffee-rails (3.2.2)
       coffee-script (>= 2.2.0)
@@ -187,6 +188,7 @@ DEPENDENCIES
   better_errors
   binding_of_caller
   brakeman
+  cancan
   coffee-rails (~> 3.2.1)
   devise
   jquery-rails