Our policies are written in a logical programming language (Prolog). While it is hard to program in Prolog, it does give us some very cool out of the box features. It allows us to query it and ask questions like: "Given a user (eg. Jake), give me all the action and resource pairs" "Given a specific action (in your case a permission) and a resource, tell me all the users that have this"