1permit( 2 principal is User, 3 action in [ 4 HttpMethod::"DELETE", 5 HttpMethod::"GET", 6 HttpMethod::"HEAD", 7 HttpMethod::"PATCH", 8 HttpMethod::"POST", 9 HttpMethod::"PUT" 10 ], 11 resource 12);