def allowed_params_for(resource, params, controller=nil)
      controller  = set_controller(resource, controller)
      resource    = set_resource(resource)

      current_permission = load_permission(controller)

      if current_permission && current_permission.allowed_params
        params.require(resource).permit *current_permission.allowed_params
      end
    end
def allowed_params_for(resource, params, controller=nil)
      controller  = set_controller(resource, controller)
      resource    = set_resource(resource)

      current_permission = load_permission(controller)

      if current_permission && current_permission.allowed_params
        params.require(resource).permit *current_permission.allowed_params
      end
    end
'book/review', params #=> controller == 'books/reviews'
 'book/review', params, 'reviews' #=> controller == 'reviews'