code: def ensure(user, action, subject):
      
      ability = Ability(user, get_authorization_method())
      if ability.cannot(action, subject):
          raise AccessDenied()
docs: Similar to ``can`` but will raise a AccessDenied Exception if does not have access