zammad/app/policies/controllers/cti_controller_policy.rb

class Controllers::CtiControllerPolicy < Controllers::ApplicationControllerPolicy
  default_permit!('cti.agent')
end