{
  "roles": {
    "anon": { "above": [], "held": { "by": "everyone" } },
    "user": { "above": ["anon"], "held": { "by": "identity", "role": "user" } },
    "author": { "above": ["user"], "held": { "by": "row", "column": "author_id" } },
    "admin": { "above": ["author"], "held": { "by": "identity", "role": "admin" } }
  },
  "resources": {
    "drawing": {
      "api": "/api/drawings",
      "can": {
        "create": "user",
        "read": "author",
        "update": "nobody",
        "delete": "author",
        "list": "author"
      }
    },
    "audit": {
      "api": "/api/audit",
      "can": {
        "create": "nobody",
        "read": "admin",
        "update": "nobody",
        "delete": "nobody",
        "list": "admin"
      }
    }
  }
}