user_role: student

decision: allow

scope_required: case:read case:write

decision: block

policy_decision: block


user_role: operator

scope_required: case:read email:draft

policy_decision: allow