Policy authorizer not applying to read action

policies do
  policy always() do
    authorize_if action(:create)
    authorize_if expr(user_id == ^actor(:id))
  end
end