module modreq_role_opt 1.0;

require { 
	class file {read write};
	
}

type mod_global_t;

optional {
	require {
		role role_req_r, user_r;
	}
	type mod_opt_t;

	allow role_req_r user_r;
}