ScopesToRules takes the scopes and return the rules back.

ScopesToVisibleNamespaces returns a list of namespaces that the provided scopes have "get" access to.

UserFull includes all permissions of the user.

UserListAllProjects gives explicit permission to see the projects a user can see.

UserListScopedProjects gives explicit permission to see the projects that this token can see.

ScopeEvaluators map prefixes to a function that handles that prefix.

ScopeEvaluator takes a scope and returns the rules that express it.