docs: def global_permission_set(self):
          '''All users must be authenticated. Only admins can create other admin
          users.'''
          only_admins_create_admins = Or(
              AllowAdmin,
              And(
                  ObjAttrTrue(
                      lambda r, _: r.data.get('admin') is not True),
                  Or(
                      AllowPermission('org:admin')
                  )
              )
          )
  
          return And(
              AllowOnlyAuthenticated,
              Or(
                  Not(AllowCreate),
                  only_admins_create_admins
              )
          )