package USER.UPDATE default allow := false allow { input.uuid == input.owner } allow { input.role == "admin" }