So say I have

user:Bob#has@attribute:disabled

to indicate that we've turned off Bob's account access. I'm now trying to write the permission that excludes disabled users from accessing data.

permission write = owner->act_on_behalf - ???