Authorization.Policy.authorize

You're seeing just the callback authorize, go back to Authorization.Policy module for more information.
Link to this callback

authorize(action, user, subject)

Specs

authorize(action :: atom(), user :: any(), subject :: any()) ::
  :ok | {:error, String.Chars.t()} | boolean() | dataloader_result()