permit (
  principal == User::"1",
  action == Permission::"read",
  resource == Organization::"2"
);