pub fn authorize( ctx: &ReqCtx, allowed_roles: &[String], resource: &str, action: Action<'_>, ) -> bool