1permit (
2  principal == User::"alice",
3  action == Permission::"view",
4  resource in Album::"jane_vacation"
5);