permit ( principal == User::"alice", action == Action::"update", resource == Photo::"VacationPhoto94.jpg" );