1 2 3 4 5
permit ( principal == User::"1", action == Action::"read", resource in Organization::"1" );