pub fn get_permission_expr( conn: &Connection, subject_kind: &str, subject_id: &str, permission: &str, ) -> Result<Option<String>, String>
Reads a stored expression for a subject, if any.