CompactRules combines rules that contain a single APIGroup/Resource, differ only by verb, and contain no other attributes.

ConfirmNoEscalation determines if the roles for a given user in a given namespace encompass the provided role.

NewTestRuleResolver returns a rule resolver from lists of role objects.

StaticRoles is a rule resolver that resolves from lists of role objects.