Nice custom assert for permissions - I like the readability of the declaration and that it can assert authorized and unauthorized conditions.