{
  "title": "Access rules",
  "description": "Fine-grained rules on top of the base roles. More specific rules win: a rule on a page beats one on a label, which beats one on the whole pond.",
  "subject": {
    "user": "{{name}}",
    "authenticated": "Signed-in users",
    "public": "Everyone (public)"
  },
  "ability": {
    "reader": "read",
    "editor": "edit",
    "pond_admin": "administer"
  },
  "scope": {
    "pond": "everything in this pond",
    "label": "pages labeled “{{name}}”",
    "page": "the page “{{name}}”"
  },
  "sentence": {
    "allow": "{{subject}} may {{ability}} {{scope}}.",
    "deny": "{{subject}} may not {{ability}} {{scope}}."
  },
  "noRules": "No rules yet — only the base roles apply.",
  "add": {
    "title": "Add a rule",
    "subject": "Who",
    "scopeType": "Where",
    "scopeLabel": "Label",
    "scopePage": "Page",
    "role": "Ability",
    "effect": "Effect",
    "allow": "Allow",
    "deny": "Deny",
    "submit": "Add rule",
    "pickScope": "Choose a label or page.",
    "shadowedWarning": "A more specific rule for this subject already decides the opposite here — this rule may have no effect.",
    "publicWarning": "This makes content visible to everyone on the internet. Are you sure?",
    "publicConfirm": "Yes, make it public"
  },
  "remove": "Remove",
  "loadError": "Access rules could not be loaded.",
  "inspector": {
    "title": "Effective permissions",
    "description": "Check what a person, all signed-in users, or the public can actually do here.",
    "subject": "Who",
    "page": "On page (optional)",
    "wholePond": "The whole pond",
    "read": "Read",
    "write": "Edit",
    "outcome": { "allow": "Allowed", "deny": "Denied" },
    "decidedBy": {
      "site-admin": "Site Admin — bypasses all rules",
      "page": "decided by a page-level rule",
      "label": "decided by a label-level rule",
      "pond": "decided by a pond-level rule",
      "default": "no rule grants this (default: denied)"
    }
  }
}