Function authorize 

pub fn authorize<P, U, S>(
    user: &U,
    ability: &str,
    subject: &S,
) -> Result<(), Error>
where
    P: Policy<U, S>,

Convenience: ability-check shorthand. Returns Error::Forbidden on failure.