permit (
  principal == User::"alice",
  action == Permission::"view",
  resource in Album::"jane_vacation"
);