Macro policy 

policy!() { /* proc-macro */ }

Inline policy macro.

policy! {
    role Analyst {
        can [read, read_sensitive] on ["reports/*"];
    }
    role Engineer {
        can [read, write, execute] on ["code/*"];
    }
}

Expands each role X { ... } block to a struct + Role impl.