fn has_permission(user_role: UserRole, action: Action) -> bool