module foo 1.0;

require {
	type foo, bar;
	class file { read write };
}

allow foo bar : file { read write };