An authorization plugin using declarative notation to define access rules in your client code