Design a Permission and Role System

Design a role-based access control system. Include users, roles, and permissions, role hierarchy with inheritance, resource-level policies, permission resolution, and access evaluation.