{
    "readonly": "(project_id:%(project_id)s and role:readonly)",
    "global_readonly": "(role:global_readonly)",
    "_member_role": "(role:member or role:_member_)",
    "member": "(project_id:%(project_id)s and rule:_member_role)",
    "admin": "(is_admin:True or role:admin)",
    "owner": "(user_id:%(user_id)s and rule:_member_role)",

    "default": "role:admin",

    "add_image": "rule:admin or rule:member",
    "delete_image": "rule:admin or rule:member or rule:owner",
    "get_image": "rule:admin or rule:member or rule:readonly",
    "get_images": "rule:admin or rule:member or rule:readonly",
    "modify_image": "rule:admin or rule:member",
    "publicize_image": "rule:admin",
    "copy_from": "rule:admin or rule:member",

    "download_image": "rule:admin or rule:member",
    "upload_image": "rule:admin or rule:member",

    "delete_image_location": "rule:admin or rule:member",
    "get_image_location": "rule:admin or rule:member",
    "set_image_location": "rule:admin or rule:member",

    "add_member": "rule:admin or rule:member",
    "delete_member": "rule:admin or rule:member",
    "get_member": "rule:admin or rule:member or rule:readonly",
    "get_members": "rule:admin or rule:member or rule:readonly",
    "modify_member": "rule:admin or rule:member",

    "manage_image_cache": "role:admin",

    "get_task": "role:admin",
    "get_tasks": "role:admin",
    "add_task": "role:admin",
    "modify_task": "role:admin",

    "deactivate": "rule:admin or rule:member",
    "reactivate": "rule:admin or rule:member",

    "get_metadef_namespace": "rule:admin or rule:member or rule:readonly",
    "get_metadef_namespaces":"rule:admin or rule:member or rule:readonly",
    "modify_metadef_namespace":"rule:admin or rule:member",
    "add_metadef_namespace":"rule:admin or rule:member",

    "get_metadef_object":"rule:admin or rule:member or rule:readonly",
    "get_metadef_objects":"rule:admin or rule:member or rule:readonly",
    "modify_metadef_object":"rule:admin or rule:member",
    "add_metadef_object":"rule:admin or rule:member",

    "list_metadef_resource_types":"rule:admin or rule:member or rule:readonly",
    "get_metadef_resource_type":"rule:admin or rule:member or rule:readonly",
    "add_metadef_resource_type_association":"rule:admin or rule:member",

    "get_metadef_property":"rule:admin or rule:member or rule:readonly",
    "get_metadef_properties":"rule:admin or rule:member or rule:readonly",
    "modify_metadef_property":"rule:admin or rule:member",
    "add_metadef_property":"rule:admin or rule:member",

    "get_metadef_tag":"rule:admin or rule:member or rule:readonly",
    "get_metadef_tags":"rule:admin or rule:member or rule:readonly",
    "modify_metadef_tag":"rule:admin or rule:member",
    "add_metadef_tag":"rule:admin or rule:member",
    "add_metadef_tags":"rule:admin or rule:member"

}