val query : acl -> bool
(* Is this permission granted? *)
+ val queryAll : string -> (string * string list) list
+ (* What are all of a user's permissions, by class? *)
+
val class : {user : string, class : string} -> DataStructures.StringSet.set
(* For what objects does the user have the permission? *)