Function code_grants 

pub fn code_grants(
    workspace: &str,
    author: &Subject,
    trusted: bool,
) -> Vec<Grant>

The grants code written by author holds in workspace as a party of its own: trusted code reads and makes undoable changes and asks before reaching outside, other code asks before everything.