anyone_allowed_action: allow_all admin_allowed_action: admin member_allowed_action: member admin_and_member_allowed_action: [admin, member] no_one_allowed_action: deny_all