+1, it's probably too big to specify in engine.rb but I'd extract the whole map to one file preferably in similar location (app/services/katello/access_permissions.rb)