The best way to use permissions in serializers

I want to show the attrib, using cancancan in serializer model, it is possible ? what is the good practices for that, thanks !