Should there be multiple permissions on same resource and action

[apstanisic]

Currently it's guarded with composite unique key that one role can only have single resource and action For example:

[
  {
    "resource": "posts",
    "action": "read",
    "fields": null,
    "conditions": { "published": true }
  },
  {
    "resource": "posts",
    "action": "read",
    "fields": ["title", "published_at"],
    "conditions": { "published": false }
  },
]

In this case user can see everything if post is published, and only title and when will post be published, if it's not published