fn parse_group_rule( group: &str, rule: String, ) -> Result<PermissionRuleExpression, PermissionConfigError>