@dalias @pid_eins @mariusor While I'm not the biggest fan of Polkit's JS rules system, the vast majority of access decisions get made based on the default rules in the action files.
And at the end of the day, all access decisions are made by code. Having it in human readable text files is not the worst thing in the world.