policy.csv

# admin have all priviliges
p, admin, *, *

# anyone could perform read-only operation
p, *, *, get
p, *, *, list

# member could perform write operations
p, member, /validate, create
p, member, /validate, update
p, member, /validate, patch
p, member, /validate, delete