Example authorizations for cancan: can :manage, :all # includes can :show_in_app, :all # includes can :show_in_app, Model # includes can :show_in_app, Model, { conditions } More here