As a security officer, I need all web accesses to any case-oriented Active Record models recorded for export and analysis.

For controllers that access case in order to manipulate things associated with the case (CaseAssignment, CaseResource), we call impressionist inside the actions, not at the controller level; that lets us cover more situations than the global (per-controller) impressionist call. OTOH: still have to be able to override the controller name as logged (esp. in Stark).
That makes sense.