[matchers] m = (p.obj in r.sub.roles) && p.act == r.act
request: {name: 'alice', roles: ['data1','b']}, data1, read
you can try it in the editor for acl