ScopesToRules takes the scopes and return the rules back.

UserListProject gives explicit permission to see the projects a user can see.

ScopeEvaluators map prefixes to a function that handles that prefix.

ScopeEvaluator takes a scope and returns the rules that express it.