rule DeleteImage
 no-loop
 activation-group "permissions"
 when
 acct: MemberAccount()
 image: MemberImage(mbr : member -> (mbr.memberId.equals(acct.member.memberId)))
 check: PermissionCheck(target == image, action == "delete", granted == false)
 then
 check.grant();
 endAccountPermission
=================
RECIPIENT TARGET ACTION DISCRIMINATOR
-----------------------------------------------
bob Customer:1234 update user