Concept of C# fluent security that I am implementing in NES.RavenDB.Example

SecurityConcept.cs

    public class Security : IDescriptor
    {
        public Security()
        {
            //  Action       Target            Securable
            When.Receiving().Queries().OfType<Queries.GetItem>()
                // Actors
                .Allow(x => x.Users()
                    // Rule
                    .WithPermission("GetItems"))
                .Allow(x => x.Groups().WithPermission("GetItems"))
                .Deny(x => x.Users().Having(u => u.Username.BeginsWith("John")));

            When.Executing().Functions().InNamespace("SecureSpace")
                .Allow(x => x.Users().Having(u => u.Username.BeginsWith("Admin")));

            When.Reading().Properties().Inside<Queries.GetItem>("Number")
                .Allow(x => x.Services().InNamespace("Inventory"))
                .Deny(x => x.Users().Having(u => u.Username.BeginsWith("John")));
        }
    }