CanCan::ControllerAdditions
The controller seam. Fake controllers (oracle spec) include it
directly; ActionController::Base includes it with params bridged.
Instance methods
Nested subject authorize (the gem's {parent => child} subject).
The current action as a Symbol. Crystal has no runtime String#to_sym; ActionController subclasses get a generated dispatch (macro finished below); other controllers define this themselves.
A through: parent (gem: ivar or controller method). Controllers
override to expose parent-fetching methods; the default reads the
instance store.
Strong parameters seam: sanitizing controllers override (the gem resolves <action>_params / <name>_params with respond_to?). Return nil to fall back to the raw resource params.
Fake/test controllers: plain hash params. ActionController::Base
bridges to its own params instead (cancan_param override).