CanCan + strong_parameters easiest hack

cancan_strong_parameters.rb

# From: https://github.com/ryanb/cancan/pull/757
# Here for reference

##
# Tell CanCan to use the user-controller resource_params method
# rather than its own (when the user-method) is available

module CanCan
  class ControllerResource
    def resource_params
      return @controller.send(:resource_params) if @controller.respond_to?(:resource_params)
      super
    end
  end
end

##
# Then make a (public) resource_params method in your own controller
# Where you use strong_parameters

def create
  Site.new resource_params
end

def resource_params
  aparams = params[:site]
  aparams.permit(:name)
end