{
    "context_is_admin":  "role:admin",
    "admin_or_owner": "rule:context_is_admin or tenant_id:%(tenant_id)s",
    "admin_only": "rule:context_is_admin",
    "regular_user": "",
    "shared": "field:vims:shared=True",
    "default": "rule:admin_or_owner",

    "get_vim": "rule:admin_or_owner or rule:shared"
}