Whether the user may perform ability on this specific record. Absent means denied — an unlisted ability is never assumed allowed.
ability
bool can(String ability) => permissions[ability] ?? false;