auth/opa/user/user2.rego

package user2

default allow := false

allow := true {
    input.user == "pierre"
}