permit ( principal == User::"alice", action == Action::"update" , resource == Photo::"VacationPhoto94.jpg" ) ;