I think as @arekkas stated that exactly this was the point of implementing this feature. From architectural point of view, I think that the caller itself is just the wrong place to handle assertions. See my explanation about `post.edit.all` and `post.edit.only_mine` permissions.