only + permitted in model instead of controller

app/controllers/admin/application_controller.rb

...rollers/admin/communication/blocks/headings_controller.rb

app/controllers/admin/communication/blocks_controller.rb

app/controllers/admin/communication/contents_controller.rb

...lers/admin/communication/extranets/contacts_controller.rb

...trollers/admin/communication/websites/pages_controller.rb

...ers/admin/communication/websites/permalinks_controller.rb

app/controllers/admin/users_controller.rb

app/models/communication/block.rb

app/models/communication/block/heading.rb

app/models/communication/extranet/connection.rb

app/models/communication/website/page.rb

app/models/communication/website/page/organization.rb

app/models/communication/website/page/person.rb

app/models/communication/website/permalink.rb

app/models/user/favorite.rb

app/services/polymorphic_object_finder.rb