Currently if you are building dynamic permissions in self service actions the only way to test if the permission works is trial and error by attempting to execute the action.

A UI allowing you to interactively test the permissions to is really needed.

This UI would allow you to see the following:

-the result of the query in the policy

-the result of the jq condition evaluation

-the value of any metadata references specified in value fields in the policy or condition (i.e. {{.entity.identifier}})