
    "*": deny
    read: allow