// List all roles
RLMResults<RLMPermissionRole *> *roles = [RLMPermissionRole allObjectsInRealm:realm];
​
// You can query roles in order to find a specific one
RLMPermissionRole *role = [RLMPermissionRole objectsInRealm:realm where:@"name = %@", @"my-role"].firstObject;
  
// Making changes to a Role requires a write transaction
RLMPermissionUser *user = getUserId();
[realm transactionWithBlock:^{
  [role.users addObject:user];
}];
​
// So does creating a new role
[realm transactionWithBlock:^{
  [RLMPermissionRole createInRealm:realm withValue:@[@"my-new-role"]];
}];

// List all roles
RealmResults<Role> roles = realm.getRoles();
​
// You can query roles in order to find a specific one
Role role = realm.getRoles().where()
  .equalTo("name", "my-role")
  .findFirst();
  
// Making changes to a Role requires a write transaction
String user = getUserId();
realm.executeTransaction((Realm r) -> {
  role.addMember(user);
}); 
​
// So does creating a new role
realm.executeTransaction((Realm r) -> {
  r.insert(new Role("my-new-role"));
});

// List all roles
let roles = realm.objects(Realm.Permissions.Role);
​
// You can query roles in order to find a specific one
let role = realm
  .objects(Realm.Permissions.Role)
  .filtered(`name = 'my-role'`)[0];
  
// Making changes to a Role requires a write transaction
let user = getUser();
realm.write(() => {
  role.members.push(user);
})
​
// So does creating a new role
realm.write(() => {
  realm.create(Realm.Permissions.Role, { name: "my-new-role" });
});

// List all roles
var roles = realm.All<PermissionRole>();
​
// You can query roles in order to find a specific one
var role = realm.All<PermissionRole>().FirstOrDefault(r => r.Name == "my-role");
​
// Making changes to a Role requires a write transaction
realm.Write(() =>
{
    var user = PermissionUser.Get(realm, "some-user-id");
    role.Users.Add(user);
});
​
// So does creating a new role
realm.Write(() =>
{
    var newRole = PermissionRole.Get(realm, "my-new-role");
});

// Create Permission object that grants read and update privileges to a Role
[realm transactionWithBlock:^{
  [RLMPermission createInRealm:realm withValue:@{
    @"role": getRole(),
    @"canRead": @YES,
    @"canUpdate": @YES
  }];
}];

// Create Permission object that grants read and update privileges to a Role
Role role = getRole();
Permission permission = new Permission.Builder(role)
  .canRead(true)
  .canUpdate(true)
  .build();  

// Create Permission object that grants read and update privileges to a Role
let permission = realm.create(Realm.Permissions.Permission, {
  role: getRole(),
  canRead: true,
  canUpdate: true,
});  

// Create Permission object that grants read and update privileges to a Role
realm.Write(() =>
{
    // The permission can be associated with a Realm, a class, or an object.
    // Alternatively, you can pass in a collection of permissions to add the
    // new one to.
    var permission = Permission.Get("my-role", realm);
    permission.CanRead = true;
    permission.CanUpdate = true;
});

// List all Realm-level permissions
RLMRealmPermissions *permissions = [RLMRealmPermissions objectInRealm:realm];
​
// Find Realm level permissions for a given role
RLMPermission *rolePermissions = [permissions objectsWhere:@"role.name = %@", @"my-role"]

// Get the wrapper object for all Realm-level permissions
RealmPermissions realmPermissions = realm.getPermissions()
​
// List all Realm-level permissions
RealmList<Permission> allPermissions = realmPermissions.getPermissions()
​
// Find permissions for a given role
Permission rolePermissions = realmPermissions.getPermissions()
  .equalTo("role.name", "my-role")
  .findFirst()

// Get the global Realm-level permissions object
let realmPermissions = realm.permissions();
​
// Find permissions for a given role
let rolePermissions = realmPermissions.permissions
  .filtered(`role.name = 'my-role'`)[0];
 
// List the Realm-level permissions for all roles   
let allPermissions = realmPermissions.permissions;

// List all Realm-level permissions
var realmPermissions = RealmPermission.Get(realm).Permissions;
​
// Find Realm level permissions for a given role
var rolePermissions = realmPermissions.FirstOrDefault(p => p.Role.Name == "my-role");

// Permissions must be modified inside a write transaction
[realm transactionWithBlock:^{
  // Grant read-only access at the Realm-level, which means
  // that users with this role can read all objects in the Realm
  // unless restricted by Class or Object level permissions.
  RLMPermission *permissions = [RLMPermission permissionForRoleNamed:@"my-role" onRealm:realm];
  permissions.canRead = true;
  permissions.canQuery = true;
}];

// Adding new permissions must be done within a write transaction
realm.executeTransaction((Realm r) -> {
  RealmPermissions realmPermissions = realm.getPermissions()
​
  // Grant read-only access at the Realm-level, which means
  // that users with this role can read all objects in the Realm
  // unless restricted by Class or Object level permissions.
  Permission permissions = realmPermissions.findOrCreate("my-role")
  permissions.setCanRead(true)
  permissions.setCanQuery(true)
 });

// Adding new permissions must be done within a write transaction
realm.write(() => {
  let realmPermissions = realm.permissions().permissions;
  
  // Grant read-only access at the Realm-level, which means
  // that users with this role can read all objects in the Realm
  // unless restricted by Class or Object level permissions.
  let role = realm.objects(Realm.Permissions.Role)
    .filtered(`name = 'my-role'`)[0];
  let permission = realm.create(Realm.Permissions.Permission, {
    role: role,
    canRead: true,
    canQuery: true,
  });  
  
  // Add it to the list of permissions for it to take affect.
  realmPermissions.push(permission);
});

// Adding new permissions must be done within a write transaction
realm.Write(() =>
{
    // Grant read-only access at the Realm-level, which means
    // that users with this role can read all objects in the Realm
    // unless restricted by Class or Object level permissions.  
    var permission = Permission.Get("my-role", realm);
    permission.CanRead = true;
    permission.CanQuery = true;
});

// Permissions must be modified inside a write transaction
[realm transactionWithBlock:^{
  // Find permissions for the specific role
  RLMPermission *permissions = [RLMPermission permissionForRoleNamed:@"my-role" onRealm:realm];
  
  // Prevent `my-role` users from modifying any objects in the Realm.
  permissions.canRead = false;
  permissions.canQuery = false;
}];

// Modifying permissions must be done within a write transaction
realm.executeTransaction((Realm r) -> {
  RealmPermissions realmPermissions = realm.getPermissions();
  
  // Find permissions for the specific role
  Permission permission = realmPermissions.findOrCreate("my-role");
  
  // Prevent `my-role` users from modifying any objects in the Realm.
  permission.setCanUpdate(false);
  permission.setCanDelete(false);    
});

// Modifying permissions must be done within a write transaction
realm.write(() => {
  let realmPermissions = realm.permissions().permissions;
  
   // Find permissions for the specfic role
  let permission = realmPermissions.filtered('role.name', 'my-role')[0];
  
  // Prevent `my-role` users from modifying any objects in the Realm.
  permission.canUpdate = false;
  permission.canDelete = false;
});

// Modifying permissions must be done within a write transaction
realm.Write(() =>
{
    // Find permissions for the specific role
    var permission = Permission.Get("my-role", realm);
    permission.CanUpdate = false;
    permission.CanDelete = false;
});

// List the Class-level permissions for the given model class
RLMClassPermission *classPermissions =
    [RLMClassPermission objectInRealm:realm forClass:Person.class];
​
// Find Class-level permissions for a given role
RLMPermission *rolePermissions = [[classPermissions.permissions
                                   objectsWhere:@"role.name = %@", @"my-role"]
                                  firstObject];

// Get the Class-level permissions object for the Person class
ClassPermissions classPermissions = realm.getPermissions(Person.class);
  
// List the Class-level permissions for all roles
RealmList<Permission> permissions = classPermissions.getPermissions();
​
// Find Class-level permissions for a given role
Permission rolePermissions = classPermissions.getPermissions().where()
  .equalTo("role.name", "my-role")
  .findFirst();

// Get the Class-level permissions object for the Person class
let classPermissions = realm.permissions('Person');
​
// List the Class-level permissions for all roles
let permissions = classPermissions.permissions;
​
// Find Class-level permissions for a given role
let rolePermissions = classPermissions.permissions
  .filtered(`role.name = 'my-role'`)[0];

// List the Class-level permissions for the given model class
var classPermissions = ClassPermission.Get<Person>(realm).Permissions;
​
// Find Class-level permissions for a given role
var rolePermission = classPermissions.FirstOrDefault(p => p.Role.Name == "my-role");

// Adding new permissions must be done within a write transaction
[realm transactionWithBlock:^{
  // Remove read-access for the Person class for users with the `my-role` role.
  RLMPermission *permission = [RLMPermission permissionForRoleNamed:@"my-role"
                                                           onClass:Person.class
                                                             realm:realm];
  permission.canRead = false;
});

// Adding new permissions must be done within a write transaction
realm.executeTransaction((Realm r) -> {
  ClassPermissions realmPermissions = realm.getPermissions(Person.class);
  
  // Remove read-access for the Person class for users with the `my-role` role.
  Role role = realm.where(Role.class).equalTo("name", "my-role").findFirst();
  Permission p = new Permission.Builder(role)
    .canRead(false)
    .build();
      
  // Add it to the list of permissions for it to take affect.
  classPermissions.getPermissions().add(permission);  
});

// Adding new permissions must be done within a write transaction
realm.write(() => {
  let realmPermissions = realm.permissions('Person').permissions;
  
  // Remove read-access for the Person class for users with `my-role` role.
  let role = realm.objects(Realm.Permissions.Role)
    .filtered(`name = 'my-role'`)[0];
    
  let permission = realm.create(Realm.Permissions.Permission, {
    role: role,
    canRead: false,
  });  
  
  // Add it to the list of permissions for it to take affect.
  classPermissions.push(permission);
});

// Adding new permissions must be done within a write transaction
realm.Write(() =>
{
    var permission = Permission.Get<Person>("my-role", realm);
    
    // Alternatively, there's a string-based API if, for some reason,
    // you can't use the generic one.
    // var permission = Permission.Get("my-role", "Person", realm);
​
    permission.CanRead = false;
});

// Modifying permissions must be done within a write transaction
[realm transactionWithBlock:^{
  RLMPermission *permission = [RLMPermission permissionForRoleNamed:@"my-role"
                                                           onClass:Person.class
                                                             realm:realm];
​
  // Prevent `my-role` users from modifying any Person objects.
  permission.canUpdate = false;
  permission.canDelete = false;
});

// Modifying permissions must be done within a write transaction
realm.executeTransaction((Realm r) -> {
  ClassPermissions classPermissions = realm.getPermissions(Person.class);
  
  // Find permissions for the role and change it
  Permission permission = classPermissions.getPermissions().where()
    .equalTo("role.name", "my-role")
    .findFirst();
  
  // Prevent `my-role` users from modifying any Person objects.
  permission.setCanUpdate(false);
  permission.setCanDelete(false);    
});

// Modifying permissions must be done within a write transaction
realm.write(() => {
  let classPermissions = realm.permissions('Person').permissions;
  
   // Find permissions for a specfic role
  let permission = classPermissions.filtered(`role.name = 'my-role'`)[0];
  
  // Prevent `my-role` users from modifying any objects in the Realm.
  permission.canUpdate = false;
  permission.canDelete = false;
});

// Modifying permissions must be done within a write transaction
realm.Write(() =>
{
    var permission = Permission.Get<Person>("my-role", realm);
    // Prevent `my-role` users from modifying any Person objects.
    permission.CanUpdate = false;
    permission.CanDelete = false;
});

// The ACL property is a `RLMArray<RLMPermission *>` field 
// with a user-defined name
@interface Person : RLMObject
@property NSString *name;
@property RLMArray<RLMPermission *><RLMPermission> *permissions;
@end

// The ACL property is a `RealmList<Permission>` field 
// with a user-defined name
public class Person extends RealmObject {
  public String name;
  public RealmList<Permission> permissions = new RealmList<>();
}

// The ACL property is a list-of-permission property 
// with a user-defined name
const PersonSchema = {
    name: 'Person',
    properties: {
        name: 'string',
        permissions: '__Permission[]'
    }
};

// The ACL property is an `IList<Permission>` property with a user-defined name
public class Person : RealmObject
{
    // Other properties ...
​
    public IList<Permission> Permissions { get; }
}

// Adding new permissions must be done within a write transaction
[realm transactionWithBlock:^{
  // Grant users with the `shared-objects` role access to read and modify
  // this object
  Person *person = getPerson();
  RLMPermission *permissions = [RLMPermission
                                permissionForRoleNamed:@"shared-objects"
                                inArray:person.permissions];
  permissions.canRead = true;
  permissions.canUpdate = true;
  permissions.canDelete = true;
}];

// Adding new permissions must be done within a write transaction
realm.executeTransaction((Realm r) -> {
  Person p = realm.where(Person.class).equalto("id", getId()).findFirst()
  
  // Grant users with the `shared-objects` role access to read and modify
  // this object
  Role role = realm.where(Role.class)
    .equalTo("name", "shared-objects")
    .findFirst();
  Permission p = new Permission.Builder(role)
    .canRead(true)
    .canUpdate(true)
    .canDelete(true)
    .build();
      
  // Add it to the list of permissions associated with the object
  // for it to take affect.
  p.permissions.add(permission);  
});