permit (
    principal == Subject::"*",
    action == Action::"GET",
    resource in Path::"/projects.json"
);