ability.rb

# syntax
can(action, object_class)

# ability.rb
can(:custom_ability, Person)
can(:controller_action, Person)
cannot(:read, Feedback) { |model| true }

# persons_controller.rb
def action
  can?(:custom_ability, @person)
  ...
end

def controller_action
  # checks automatically by cancan
  ...
end