pub fn assert_mutable_permissions( current_rule: Option<&Rule>, user_rule: &SetRule, ) -> Result<(), String>