sub = "999" # the user that wants to access a resource. obj = "/api/user?aaa=1" # the resource that is going to be accessed. act = "GET" # the operation that the user ...