Unlike Registry PE, Match uses Cake's Authorization Component, which is deprecated in Cake 4 in favor of the somewhat complicated Authorization Plugin. Migrate to that Plugin, or implement something like PE's Authorization infrastructure.