Policy application

[h0pbeat]

We need a generic policy application that will allow us to make calls from different places in the code and return True/False, depending if user, in given context, with given request etc. is authorized to perform given action.