{
  "decisions": [
    {
      "surface": "object",
      "principal": "owner",
      "target": "Widget",
      "operation": "Read",
      "allow": true
    },
    {
      "surface": "object",
      "principal": "owner",
      "target": "Widget",
      "operation": "Create",
      "allow": false
    },
    {
      "surface": "object",
      "principal": "owner",
      "target": "Widget",
      "operation": "Edit",
      "allow": true
    },
    {
      "surface": "object",
      "principal": "owner",
      "target": "Widget",
      "operation": "Delete",
      "allow": false
    },
    {
      "surface": "object",
      "principal": "owner",
      "target": "PrivateDoc",
      "operation": "Read",
      "allow": true
    },
    {
      "surface": "object",
      "principal": "owner",
      "target": "PrivateDoc",
      "operation": "Create",
      "allow": false
    },
    {
      "surface": "object",
      "principal": "owner",
      "target": "PrivateDoc",
      "operation": "Edit",
      "allow": true
    },
    {
      "surface": "object",
      "principal": "owner",
      "target": "PrivateDoc",
      "operation": "Delete",
      "allow": false
    },
    {
      "surface": "field",
      "principal": "owner",
      "target": "PrivateDoc.Name",
      "operation": "visible",
      "allow": true
    },
    {
      "surface": "field",
      "principal": "owner",
      "target": "PrivateDoc.Name",
      "operation": "editable",
      "allow": true
    },
    {
      "surface": "field",
      "principal": "owner",
      "target": "PrivateDoc.Locked__c",
      "operation": "visible",
      "allow": true
    },
    {
      "surface": "field",
      "principal": "owner",
      "target": "PrivateDoc.Locked__c",
      "operation": "editable",
      "allow": false
    },
    {
      "surface": "row",
      "principal": "owner",
      "target": "PrivateDoc/doc-owned",
      "operation": "read",
      "allow": true
    },
    {
      "surface": "row",
      "principal": "nonowner",
      "target": "PrivateDoc/doc-noshare",
      "operation": "read",
      "allow": false
    },
    {
      "surface": "row",
      "principal": "nonowner",
      "target": "PrivateDoc/doc-shared",
      "operation": "read",
      "allow": true
    },
    {
      "surface": "row",
      "principal": "nonowner",
      "target": "PrivateDoc/doc-team",
      "operation": "read",
      "allow": true
    },
    {
      "surface": "row",
      "principal": "nonowner",
      "target": "PrivateDoc/doc-team",
      "operation": "edit",
      "allow": true
    },
    {
      "surface": "row",
      "principal": "nonowner",
      "target": "Widget/widget-1",
      "operation": "read",
      "allow": true
    }
  ],
  "rls": [
    {
      "object": "PrivateDoc",
      "skip": false,
      "denyAll": false,
      "hasOwnerField": true,
      "ownerUserIds": [
        "user-owner"
      ],
      "includeManualShares": false,
      "includeTeamMembers": false
    },
    {
      "object": "Widget",
      "skip": true,
      "denyAll": false,
      "hasOwnerField": false,
      "includeManualShares": false,
      "includeTeamMembers": false
    }
  ],
  "admin": [
    {
      "scenario": "non_admin_views_other_user",
      "allowed": false,
      "error": "forbidden"
    },
    {
      "scenario": "admin_views_other_user",
      "allowed": true
    }
  ]
}