zammad/app/policies/controllers/proxy_controller_policy.rb

class Controllers::ProxyControllerPolicy < Controllers::ApplicationControllerPolicy
  default_permit!('admin.system')
end