zammad/app/policies/controllers/packages_controller_policy.rb

class Controllers::PackagesControllerPolicy < Controllers::ApplicationControllerPolicy
  default_permit!('admin.package')
end