A permissions framework built around declarative rules.