1 2 3 4 5 6
permit ( principal == User::"bob", action in [Action::"view", Action::"edit"], resource ) when { resource.owner == principal };