Replace enforce_access_controls with authorize!