By default there's no authorization of any kind
# File lib/comfortable_mexican_sofa/access_control/public_authorization.rb, line 7 def authorize true end