pub const SECURITY_OBJECT_PERMISSION: &str = "SecurityObjectPermission";
What a role says about the records an expression holds for.