Add an example and description on how to define more complex permission checking.