Can I set autorization for all application without putting load_and_authorize_resource in each controller?
Yes you can. See this link
class ApplicationController < ActionController::Base check_authorization end