matcher :permit_all_authorizations do
        match do |policy_class|
          @incorrectly_denied = policy_authorizations - permitted_authorizations(policy_class)
          @incorrectly_denied.empty?
        end