My user model is called WebUser and the generator for role_requirement generates the variable current_webuser. On the other hand, restful_authentication generated current_web_user (which seems more correct) so role_requirement was broken until I fixed the var name in role_requirement_system.rb

don't leak these methods as public methods on ApplicationController

["access_denied", "check_roles", "render_optional_error_file", "role_requirements", "role_requirements="]

they should be private or at least protected.