package ADMIN.LOGIN default allow := false allow { input.role == "admin" }