1permit (
2  principal == User::"1",
3  action == Permission::"read",
4  resource == Organization::"2"
5);