package user.list default allow := false allow := true { input.role == "admin" }