{
    "admin_required": [["role:admin"], ["is_admin:1"]],
    "owner" : [["user_id:%(user_id)s"]],
    "admin_or_listing": [["rule:admin_required"], ["role:userlist"]],
    "admin_or_owner": [["rule:admin_required"], ["rule:owner"]],

(...)
    "identity:get_user": [["admin_or_listing"]],
    "identity:list_users": [["admin_or_listing"]],
(...)
}