rest_policy.csv

# any user can get or create posts
p, *, /posts, (GET)|(POST)

# admins can also delete and update posts
p, admin, /post/*, (DELETE)|(UPDATE)