Permissions Matrix
Allowed (is_allow=true)
Explicitly revoked (is_allow=false)
Not set
Role × Permission