| name | readable_by |
|---|---|
| rule | EXISTS(S readable_by_organisation ORG, PER has_organisation ORG, PER has_account O, O in_group G, G name 'users') OR EXISTS(S readable_by_user O, O in_group G, G name 'users') OR EXISTS(S owned_by O) OR EXISTS(O in_group G, G name 'managers'), S is Version, O is CWUser |