pub fn parse(src: &str) -> Result<Expr, String>
Parses a permission expression.
Returns Err with a human-readable reason for anything malformed. Callers must treat a parse failure as deny — never as “no restriction”.
Err