Macro policy 

policy!() { /* proc-macro */ }

Inline policy macro.

policy! {
    role Analyst {
        can [read, read_sensitive] on ["reports/*"];
    }
    role Engineer extends Analyst {
        can [write, execute] on ["code/*"];
    }
}

Expands each role X { ... } block to a struct + Role impl.