Function files_app 

pub fn files_app(workspace: &str, granted_by: Subject) -> Grant

The grant making FILES_APP an author of workspace’s files: every workspace has files, kept as that app’s record, so whoever the workspace lets change its content changes its files through it, and the first of them to hold any starts the record. Whether a member may write stays their role’s: a viewer still writes nothing.