zammad/app/policies/controllers/time_accountings_controller_policy.rb

class Controllers::TimeAccountingsControllerPolicy < Controllers::ApplicationControllerPolicy
  default_permit!('admin.time_accounting')
end