Example authorizations for cancan: can :manage, :all # includes can :history, :all # includes can :history, Model # includes can :history, Model, { conditions } More here