def ensure(user, action, subject):
ability = Ability(user, get_authorization_method())<EOL>if ability.cannot(action, subject):<EOL><INDENT>raise AccessDenied()<EOL><DEDENT>
Similar to ``can`` but will raise a AccessDenied Exception if does not have access