the data controller can access

CGI data:

access @params  via params method

ex:

params[:id],  params[:user][:age]

session information:

access @session via session method

ex:

session['user']

model's data

ex: 

model Car has a name field

car is an instance of model Car

car.name