Here's a scenario: ```prisma model User { ... roles Role[] } model Role { ... permission string } ``` The desired policy is: ```prisma @@allow('all', auth().roles?[permission == 'ADMIN']) ```