Example authorizations for CanCanCan: can :manage, :all # includes can :read, :all # includes can :read, Model # includes can :index, Model # includes can :index, Model, { conditions } More here