There definitely shouldn't be a problem with what you're doing here, cancancan is backwards compatible with cancan (or should be!).
At first glance... is cities an associated model of User? There should be an inner join in there...
Could you post more of your controller and applicable model parts, or preferably, a minimal rails app example?