permit(
  principal is User,
  action in [
    HttpMethod::"DELETE",
    HttpMethod::"GET",
    HttpMethod::"HEAD",
    HttpMethod::"PATCH",
    HttpMethod::"POST",
    HttpMethod::"PUT"
  ],
  resource
);