1permit(
 2  principal is User,
 3  action in [
 4    HttpMethod::"DELETE",
 5    HttpMethod::"GET",
 6    HttpMethod::"HEAD",
 7    HttpMethod::"PATCH",
 8    HttpMethod::"POST",
 9    HttpMethod::"PUT"
10  ],
11  resource
12);