pub fn assert_system_collection_set_permission( collection: &CollectionKey, current_rule: Option<&Rule>, user_rule: &SetRule, ) -> Result<(), String>