package USER.LIST default allow := false allow { input.role == "admin" }