soap_work
tags
permitted_tags
zed permission check document:test_doc view user:tom --caveat-context='{"tags":["foobar"]}'