{
  "testCases": [
    {
      "name": "Test-ACL-Provider",

      "servicePolicies": {
        "serviceName": "hivedev",
        "serviceDef": {
          "name": "hive", "id": 3,
          "resources": [
            { "name": "database", "level": 1, "mandatory": true, "lookupSupported": true,
              "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
              "matcherOptions": { "wildCard": true, "ignoreCase": true },
              "label": "Hive Database", "description": "Hive Database"
            },
            {
              "name": "table", "level": 2, "parent": "database", "mandatory": true, "lookupSupported": true,
              "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
              "matcherOptions": { "wildCard": true, "ignoreCase": true },
              "label": "Hive Table", "description": "Hive Table"
            },
            {
              "name": "udf", "level": 2, "parent": "database", "mandatory": true, "lookupSupported": true,
              "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
              "matcherOptions": { "wildCard": true, "ignoreCase": true },
              "label": "Hive UDF", "description": "Hive UDF"
            },
            {
              "name": "column", "level": 3, "parent": "table", "mandatory": true, "lookupSupported": true,
              "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
              "matcherOptions": { "wildCard": true, "ignoreCase": true },
              "label": "Hive Column", "description": "Hive Column"
            }
          ],
          "accessTypes": [
            { "name": "select", "label": "Select" },
            { "name": "update", "label": "Update" },
            { "name": "create", "label": "Create" },
            { "name": "drop", "label": "Drop" },
            { "name": "alter", "label": "Alter" },
            { "name": "index", "label": "Index" },
            { "name": "lock", "label": "Lock" },
            { "name": "all", "label": "All" }
          ],
          "policyConditions":[
            { "itemId": 1, "name": "ip-range",
              "evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerIpMatcher", "evaluatorOptions": { },
              "label": "IP Address Range", "description": "IP Address Range"
            }
          ]
        },
        "policies": [
          {
            "id": 1, "name": "db=default: audit-all-access", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "default" ] },
              "table": { "values": [ "*" ] },
              "column": { "values": [ "*" ] }
            },
            "policyItems": [
              { "accesses": [], "users": [], "groups": [ "public" ], "delegateAdmin": false }
            ]
          },
          {
            "id": 2, "name": "db=default; table=test1,test2; column=column1", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "default" ] },
              "table": { "values": [ "test1", "test2" ] },
              "column": { "values": [ "column1" ] }
            },
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [ "user1", "user2" ], "groups": [ "group1", "group2" ],
                "delegateAdmin": false
              },
              { "accesses": [ { "type": "create", "isAllowed": true }, { "type": "drop", "isAllowed": true } ],
                "users": [ "admin" ], "groups": [ "cluster-admin" ],
                "delegateAdmin": true
              }
            ]
          },
          {
            "id": 3, "name": "db=default; table=test1,test2; column=column2", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "default" ] },
              "table": { "values": [ "test1", "test2" ] },
              "column": { "values": [ "column2" ] }
            },
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [ "user1", "user2" ], "groups": [ "group1", "group2" ],
                "delegateAdmin": false
              },
              {
                "accesses": [
                  { "type": "create", "isAllowed": true },
                  { "type": "drop", "isAllowed": true }
                ],
                "users": [ "admin" ], "groups": [ "cluster-admin" ],
                "delegateAdmin": true
              }
            ]
          },
          {
            "id": 4, "name": "db=finance; table=fin_*; column=*", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "finance" ] },
              "table": { "values": [ "fin_*" ] },
              "column": { "values": [ "*" ] }
            },
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [ "user1", "user2" ], "groups": [ "finance-controller" ],
                "delegateAdmin": true
              }
            ]
          },
          {
            "id": 5, "name": "db=db1; table=tmp; column=tmp*", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "db1" ] },
              "table": { "values": [ "tmp" ] },
              "column": { "values": [ "tmp*" ], "isExcludes": false }
            },
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true }, { "type": "create", "isAllowed": true } ],
                "users": [ "user1", "user2" ], "groups": [ "cluster-admin", "finance-controller" ],
                "delegateAdmin": true
              }
            ]
          },
          {
            "id": 6, "name": "db=hr;udf=udf", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "hr" ] },
              "udf": { "values": [ "udf" ] }
            },
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true }, { "type": "create", "isAllowed": true } ],
                "users": [ "user1", "user2" ], "groups": [ "cluster-admin" ],
                "delegateAdmin": true
              }
            ]
          },
          {
            "id": 7, "name": "db=hr;udf=udf*", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "hr" ] },
              "udf": { "values": [ "udf*" ] }
            },
            "denyPolicyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true }, { "type": "create", "isAllowed": true } ],
                "users": [ "user3" ], "groups": [ "public" ],
                "delegateAdmin": true
              }
            ]
          },
          {
            "id": 8, "name": "db=hr*;udf=udf", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "hr*" ] },
              "udf": { "values": [ "udf" ] }
            },
            "validitySchedules": [
              { "startTime": "2018/01/12 14:32:00", "endTime": "2020/02/13 12:16:00" }
            ],
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true }, { "type": "create", "isAllowed": true } ],
                "users": [ "user4" ], "groups": [ "hr-admin" ],
                "delegateAdmin": true
              }
            ]
          },
          {
            "id": 9, "name": "db=default; table=test2; column=column2", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "default" ] },
              "table": { "values": [ "test2" ] },
              "column": { "values": [ "column2" ] }
            },
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [ "user2", "user3" ], "groups": [],
                "delegateAdmin": false
              }
            ],
            "denyPolicyItems": [
              {
                "accesses": [ { "type": "select", "isAllowed": true }, { "type": "create", "isAllowed": true } ],
                "users": [ "user2", "user3", "user4" ], "groups": [ "group3" ],
                "delegateAdmin": false
              }
            ],
            "denyExceptions": [
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [ "user3" ], "groups": [],
                "delegateAdmin": false
              }
            ]
          },
          {
            "id": 10, "name": "db=finance; table=fin_*; column=salary", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "finance" ] },
              "table": { "values": [ "fin_*" ] },
              "column": { "values": [ "salary" ] }
            },
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [ "user3" ], "groups": [ "cluster-admin" ],
                "delegateAdmin": true,
                "conditions":[{"type":"ip-range","values":["1.*.1.*"]}]
              }
            ]
          },
          {
            "id": 11, "name": "db=default; table=table; column=column", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "default" ] },
              "table": { "values": [ "table" ] },
              "column": { "values": [ "column" ] }
            },
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [ "user1", "user2", "user3", "user4" ], "groups": [ "cluster-admin" ],
                "delegateAdmin": true
              }
            ],
            "allowExceptions": [
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [ "user4" ], "groups": [ "finance-admin" ],
                "delegateAdmin": true
              }
            ],
            "denyPolicyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [ "user2", "user3" ], "groups": [ "public" ],
                "delegateAdmin": true
              }
            ],
            "denyExceptions": [
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [ "user2", "user4" ], "groups": [],
                "delegateAdmin": true
              }
            ]
          },
          {
            "id": 12, "name": "db=finance; table=accounts; column=status", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "finance" ] },
              "table": { "values": [ "accounts" ] },
              "column": { "values": [ "status" ] }
            },
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true }, { "type": "update", "isAllowed": true } ],
                "users": [ "john", "jane" ], "groups": [ "accounting", "admin" ],
                "delegateAdmin": true
              },
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [], "groups": [ "public" ]
              }
            ],
            "allowExceptions": [
              { "accesses": [ { "type": "update", "isAllowed": true } ],
                "users": [ "mary" ], "groups": [ "interns" ]
              }
            ],
            "denyPolicyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [], "groups": [ "housekeeping" ]
              }
            ]
          },
          {
            "id": 13, "name": "db=finance; table=accounts; column=amount", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "finance" ] },
              "table": { "values": [ "accounts" ] },
              "column": { "values": [ "amount" ] }
            },
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true }, { "type": "update", "isAllowed": true } ],
                "users": [ "john", "jane" ], "groups": [ "accounting", "admin" ],
                "delegateAdmin": true
              },
              { "accesses": [ { "type": "select", "isAllowed": true } ],
                "users": [], "groups": [ "public" ]
              }
            ],
            "allowExceptions": [
              { "accesses": [ { "type": "update", "isAllowed": true } ],
                "users": [ "mary" ], "groups": [ "interns" ]
              }
            ],
            "denyPolicyItems": [
              { "accesses": [ { "type": "drop", "isAllowed": true } ],
                "users": [], "groups": [ "housekeeping" ]
              }
            ]
          },
          {
            "id": 13, "name": "db=db1; table=tbl1; column=col1", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "db1" ] },
              "table": { "values": [ "tbl1" ] },
              "column": { "values": [ "col1" ] }
            },
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true }, { "type": "update", "isAllowed": true } ],
                "users": [ "john", "jane" ]
              }
            ],
            "allowExceptions": [
              { "accesses": [ { "type": "update", "isAllowed": true } ],
                "users": [ "john" ],
                "conditions":[{"type":"ip-range","values":["1.*.1.*"]}]
              }
            ],
            "denyPolicyItems": [
              { "accesses": [ { "type": "drop", "isAllowed": true } ],
                "users": ["adam", "eve"]
              }
            ],
            "denyExceptions": [
              { "accesses": [ { "type": "select", "isAllowed": true },  { "type": "drop", "isAllowed": true }],
                "users": ["eve"],
                "conditions":[{"type":"ip-range","values":["10.*.10.*"]}]
              }
            ]
          },
          {
            "id": 14, "name": "db=db2; table=tbl2; column=col2", "isEnabled": true, "isAuditEnabled": true,
            "resources": {
              "database": { "values": [ "db2" ] },
              "table": { "values": [ "tbl2" ] },
              "column": { "values": [ "col2" ] }
            },
            "policyItems": [
              { "accesses": [ { "type": "select", "isAllowed": true }, { "type": "update", "isAllowed": true } ],
                "users": [ "john", "jane" ]
              }
            ],
            "allowExceptions": [
              { "accesses": [ { "type": "update", "isAllowed": true } ],
                "users": [ "john" ]
              }
            ],
            "denyPolicyItems": [
              { "accesses": [ { "type": "drop", "isAllowed": true } ],
                "users": ["adam", "eve"]
              }
            ],
            "denyExceptions": [
              { "accesses": [ { "type": "select", "isAllowed": true },  { "type": "drop", "isAllowed": true }],
                "users": ["eve"],
                "conditions":[{"type":"ip-range","values":["10.*.10.*"]}]
              }
            ]
          }
        ],
        "tagPolicies": {
          "serviceName": "tagdev",
          "serviceDef": {
            "name": "tag", "id": 100,
            "resources": [
              { "itemId": 1, "name": "tag", "type": "string", "level": 1, "parent": "", "mandatory": true,
                "lookupSupported": true, "recursiveSupported": false, "excludesSupported": false,
                "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
                "matcherOptions": { "wildCard": true, "ignoreCase": false },
                "label": "TAG", "description": "TAG"
              }
            ],
            "accessTypes": [
              { "itemId": 1, "name": "hive:select", "label": "hive:select" },
              { "itemId": 2, "name": "hive:update", "label": "hive:update" },
              { "itemId": 3, "name": "hive:create", "label": "hive:create" },
              { "itemId": 4, "name": "hive:drop", "label": "hive:drop" },
              { "itemId": 5, "name": "hive:alter", "label": "hive:alter" },
              { "itemId": 6, "name": "hive:index", "label": "hive:index" },
              { "itemId": 7, "name": "hive:lock", "label": "hive:lock" },
              { "itemId": 8, "name": "hive:all", "label": "hive:all", 
		"impliedGrants": [ "hive:select", "hive:update", "hive:create", "hive:drop", "hive:alter", "hive:index", "hive:lock" ] }
            ],
            "contextEnrichers": [
              { "itemId": 1, "name": "TagEnricher",
                "enricher": "org.apache.ranger.plugin.contextenricher.RangerTagEnricher",
                "enricherOptions": {
                  "tagRetrieverClassName": "org.apache.ranger.plugin.contextenricher.RangerFileBasedTagRetriever",
                  "tagRefresherPollingInterval": 60000,
                  "serviceTagsFileName": "/policyengine/ACLResourceTags.json"
                }
              }
            ],
            "policyConditions": [
              { "itemId": 1, "name": "expression",
                "evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator",
                "evaluatorOptions": { "engineName": "JavaScript", "ui.isMultiline": "true" },
                "label": "Enter boolean expression", "description": "Boolean expression"
              },
              {
                "itemId": 2, "name": "enforce-expiry",
                "evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator",
                "evaluatorOptions": { "scriptTemplate": "ctx.isAccessedAfter('expiry_date');" },
                "label": "Deny access after expiry_date?", "description": "Deny access after expiry_date? (yes/no)"
              },
              {
                "itemId": 3, "name": "ip-range",
                "evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerIpMatcher", "evaluatorOptions": { },
                "label": "IP Address Range", "description": "IP Address Range"
              }
            ]
          },
          "policies": [
            { "id": 101, "name": "RESTRICTED_TAG_POLICY", "isEnabled": true, "isAuditEnabled": true,
              "resources": {
                "tag": { "values": [ "RESTRICTED" ], "isRecursive": false }
              },
              "policyItems": [
                { "accesses": [ { "type": "hive:select", "isAllowed": true } ],
                  "users": [ "hive", "user1" ],
                  "groups": [],
                  "delegateAdmin": false,
                  "conditions": [
                    { "type": "expression", "values": [ "if ( tagAttr.get('score') < 2 ) ctx.result = true;" ] }
                  ]
                }
              ]
            },
            {
              "id": 102, "name": "PII_TAG_POLICY", "isEnabled": true, "isAuditEnabled": true,
              "resources": {
                "tag": { "values": [ "PII" ], "isRecursive": false }
              },
              "policyItems": [
                { "accesses": [ { "type": "hive:select", "isAllowed": true }, { "type": "hive:create", "isAllowed": true } ],
                  "users": [ "hive" ], "groups": [],
                  "delegateAdmin": false
                }
              ],
              "denyPolicyItems": [
                { "accesses": [ { "type": "hive:select", "isAllowed": true } ],
                  "users": [ "hive" ], "groups": [],
                  "delegateAdmin": false
                }
              ]
            },
            {
              "id": 103, "name": "PII_TAG_POLICY-FINAL", "isEnabled": true, "isAuditEnabled": true,
              "resources": {
                "tag": { "values": [ "PII-FINAL" ], "isRecursive": false }
              },
              "policyItems": [
                { "accesses": [ { "type": "hive:index", "isAllowed": true } ],
                  "users": [ ], "groups": [ "public" ],
                  "delegateAdmin": false,
                  "conditions":[{"type":"ip-range","values":["1.*.1.*"]}]
                }
              ],
              "denyPolicyItems": [
                { "accesses": [ { "type": "hive:select", "isAllowed": true } ],
                  "users": [ "admin" ], "groups": [],
                  "delegateAdmin": false
                }
              ],
              "denyExceptions": [
                {
                  "accesses": [
                    { "type": "hive:drop", "isAllowed": true }
                  ],
                  "users": [ "hive" ], "groups": [],
                  "delegateAdmin": false
                }
              ]
            },
            {
              "id": 104, "name": "RESTRICTED_TAG_POLICY_FINAL", "isEnabled": true, "isAuditEnabled": true,
              "resources": {
                "tag": { "values": [ "RESTRICTED-FINAL" ], "isRecursive": false }
              },
              "denyPolicyItems": [
                { "accesses": [ { "type": "hive:select", "isAllowed": true } ],
                  "users": [], "groups": [ "public" ],
                  "delegateAdmin": false
                }
              ],
              "denyExceptions": [
                { "accesses": [ { "type": "hive:select", "isAllowed": true } ],
                  "users": [ "hive", "user1" ], "groups": [],
                  "delegateAdmin": false,
                  "conditions": [
                    { "type": "expression", "values": [ "if ( ctx.isAccessedBefore('activation_date') ) ctx.result = true;" ] }
                  ]
                }
              ]
            },
            {
              "id": 105, "name": "EXPIRES_ON", "isEnabled": true, "isAuditEnabled": true,
              "resources": {
                "tag": { "values": [ "EXPIRES_ON" ], "isRecursive": false }
              },
              "denyPolicyItems": [
                { "accesses": [ { "type": "hive:select", "isAllowed": true } ],
                  "users": [], "groups": [ "public" ],
                  "delegateAdmin": false,
                  "conditions": [
                    { "type": "enforce-expiry", "values": [ "yes" ] }
                  ]
                }
              ],
              "denyExceptions": [
                { "accesses": [ { "type": "hive:select", "isAllowed": true } ],
                  "users": [ "dataloader" ], "groups": [],
                  "delegateAdmin": false
                }
              ]
            }
          ]
        }
      },

      "tests": [
        {
          "name": "all-deny-test",
          "resource": {"elements":{"database":"hr", "udf":"udf" }},
          "userPermissions": {},
          "groupPermissions": {"public": {"select":{"result":-1, "isFinal":true},"create":{"result":-1, "isFinal":true}}}
        },
        {
          "name": "no-deny-test",
          "resource": {"elements":{"database":"default", "table":"test1", "column":"column2"}},
          "userPermissions": {"user1":{"select":{"result":1, "isFinal":true}}, "user2":{"select":{"result":1, "isFinal":true}}, "admin":{"create":{"result":1, "isFinal":true},"drop":{"result":1, "isFinal":true}}},
          "groupPermissions": {"group1": {"select":{"result":1, "isFinal":true}}, "group2": {"select":{"result":1, "isFinal":true}},"cluster-admin": {"create":{"result":1, "isFinal":true},"drop":{"result":1, "isFinal":true}}}
        },
        {
          "name": "partial-deny-test",
          "resource": {"elements":{"database":"default", "table":"test2", "column":"column2"}},
          "userPermissions": {"user1":{"select":{"result":1, "isFinal":true}}, "user2":{"select":{"result":-1, "isFinal":true},"create":{"result":-1, "isFinal":true}}, "user3":{"select":{"result":1, "isFinal":true},"create":{"result":-1, "isFinal":true}},"user4":{"select":{"result":-1, "isFinal":true},"create":{"result":-1, "isFinal":true}},"admin":{"create":{"result":1, "isFinal":true},"drop":{"result":1, "isFinal":true}}},
          "groupPermissions": {"group1": {"select":{"result":1, "isFinal":true}}, "group2": {"select":{"result":1, "isFinal":true}},"group3": {"select":{"result":-1, "isFinal":true},"create":{"result":-1, "isFinal":true}},"cluster-admin": {"create":{"result":1, "isFinal":true},"drop":{"result":1, "isFinal":true}}}
        },
        {
          "name": "conditional-deny-test",
          "resource": {"elements":{"database":"finance", "table":"fin_1", "column":"salary"}},
          "userPermissions": {"user1":{"select":{"result":1, "isFinal":true}}, "user2":{"select":{"result":1, "isFinal":true}}, "user3":{"select":{"result":2, "isFinal":true}} },
          "groupPermissions": {"finance-controller": {"select":{"result":1, "isFinal":true}}, "cluster-admin": {"select":{"result":2, "isFinal":true}}}
        },
        {
          "name": "conditional-tag-only-test-descendant",
          "resource": {"elements":{"database":"finance", "table":"sales"}},
          "userPermissions": {"hive":{"select":{"result":-1, "isFinal":true},"create":{"result":1, "isFinal":true}, "drop":{"result":-1, "isFinal":true}}, "admin":{"select":{"result":-1, "isFinal":true}} },
          "groupPermissions": {"public": {"index":{"result":2, "isFinal":true}}}
        },
        {
          "name": "all-types-of-policy-items",
          "resource": {"elements":{"database":"default", "table":"table", "column":"column"}},
          "userPermissions": {"user1":{"select":{"result":2, "isFinal":true}}, "user2":{"select":{"result":2, "isFinal":true}}, "user3":{"select":{"result":2, "isFinal":true}}, "user4":{"select":{"result":2, "isFinal":true}} },
          "groupPermissions": {"public": {"select":{"result":2, "isFinal":true}}, "cluster-admin": {"select":{"result":2, "isFinal":true}}}
        },
        {
          "name": "public-allow-test",
          "resource": {"elements":{"database":"finance", "table":"accounts", "column": "status" }},
          "userPermissions": {"john":{"select":{"result":2, "isFinal":true}, "update":{"result":2, "isFinal":true}}, "jane":{"select":{"result":2, "isFinal":true},"update":{"result":2, "isFinal":true}}, "mary":{"update":{"result":-1, "isFinal":true}}},
          "groupPermissions": {"public": {"select":{"result":2, "isFinal":true}}, "accounting": {"select":{"result":2, "isFinal":true},"update":{"result":2, "isFinal":true}}, "admin": {"select":{"result":2, "isFinal":true},"update":{"result":2, "isFinal":true}}, "interns":{"update":{"result":-1, "isFinal":true}}, "housekeeping":{"select":{"result":-1, "isFinal":true}}}
        },
        {
          "name": "public-allow-test-next",
          "resource": {"elements":{"database":"finance", "table":"accounts", "column": "amount" }},
          "userPermissions": {"john":{"select":{"result":2, "isFinal":true}, "update":{"result":2, "isFinal":true}}, "jane":{"select":{"result":2, "isFinal":true},"update":{"result":2, "isFinal":true}}, "mary":{"update":{"result":-1, "isFinal":true}}},
          "groupPermissions": {"public": {"select":{"result":2, "isFinal":true}}, "accounting": {"select":{"result":2, "isFinal":true},"update":{"result":2, "isFinal":true}}, "admin": {"select":{"result":2, "isFinal":true},"update":{"result":2, "isFinal":true}}, "interns":{"update":{"result":-1, "isFinal":true}}, "housekeeping":{"drop":{"result":-1, "isFinal":true}}}
        },
        {
          "name": "conditions-in-exceptions-test",
          "resource": {"elements":{"database":"db1", "table":"tbl1", "column": "col1" }},
          "userPermissions": {"john":{"select":{"result":2, "isFinal":true}, "update":{"result":2, "isFinal":true}}, "jane":{"select":{"result":2, "isFinal":true},"update":{"result":2, "isFinal":true}}, "adam":{"drop":{"result":2, "isFinal":true}}, "eve":{"drop":{"result":2, "isFinal":true}}},
          "groupPermissions": {}
        },
        {
          "name": "conditions-in-some-exceptions-test",
          "resource": {"elements":{"database":"db2", "table":"tbl2", "column": "col2" }},
          "userPermissions": {"john":{"select":{"result":1, "isFinal":true}, "update":{"result":-1, "isFinal":true}}, "jane":{"select":{"result":1, "isFinal":true},"update":{"result":1, "isFinal":true}}, "adam":{"drop":{"result":2, "isFinal":true}}, "eve":{"drop":{"result":2, "isFinal":true}}},
          "groupPermissions": {}
        }
      ]
    }
  ]
}