pub fn is_allowed( actor: &Actor, action: &Action, resource: &Resource, ctx: Option<Context>, ) -> Result<(), Error>