Kohana's default auth module doesn't play well with anything but the included ORM module. To solve this, I've adapted Wouterrr's ACL stuff to work with Brass, and I aim to maintain it very actively, as I'm using it in production on many of my own projects.
This module is released under an MIT opensource license