A privacy rule that allows or disallows specific users.
A list of users.
Whether the users are allowed.