Function refusal 

pub fn refusal(
    resource: &AccessResource,
    action: AccessAction,
    request: &str,
    cause: RefusalCause,
) -> AccessDecisionError

Names the actual grant used by the alias, preserving the consumer’s cause.