fn parse_privilege( privilege_string: &str, allowed_actions: &HashSet<Action>, ) -> Result<Vec<(Action, bool)>>