func (r Roles) Can(action, target string) (bool, error) {
	for _, role := range r {
		can, err := role.Can(action, target)
		if err != nil {
			return false, err
		}
		if can {
			return true, nil
		}
	}
	return false, nil
}
Can returns true if at least one of the roles in r allows the action on the target
package rbac
type Role struct {
	RoleID      string
	Permissions Permissions
}
func (r Role) Can(action, target string) (bool, error) {
	return r.Permissions.Can(action, target)
}
type Roles []Role