Drools

rule CanUserDeleteCustomers
 when
    c: PermissionCheck(name == "customer", action == "delete" || action =="disable" )‏
    Role(name == "admin")‏
 then
    c.grant();
end;