zammad/app/policies/controllers/email_addresses_controller_policy.rb

class Controllers::EmailAddressesControllerPolicy < Controllers::ApplicationControllerPolicy
  permit! %i[index show], to: ['ticket.agent', 'admin.channel_email']
  default_permit!('admin.channel_email')
end