1 2 3 4 5 6
permit ( principal, action == Action::"view", resource ) when { principal == resource.owner };