AclPermission: Permission & { [ mode in AclMode]?: boolean }