Intersection use case - authorize a user who has an allowed role/ability

intersection_authorize.rb

class PaymentsController < AuthenticatedController
  before_action { authorize!(roles: [:superuser], abilities: [:charge_user, :manage_payments]) }
end

class AuthenticatedController < ApplicationController
  def authorize!(roles: [], abilities: [])
    # current
    (roles & current_user.roles).any? || (abilities & current_user.abilities).any?
    
    # desired
    roles.intersect?(current_user.roles) || abilities.intersect?(current_user.abilities)
  end
end