1 2 3 4 5
permit ( principal == User::"alice", action == Action::"view", resource in Album::"jane_vacation" );