{ "user": { "name": "bob", "roles": ["admin"] }, "resource": { "name": "document2", "type": "document", "owner": "bob" }, "action": "write" }