123456789101112# ACL without resources[request_definition]r = sub, act [policy_definition]p = sub, act [policy_effect]e = some(where (p.eft == allow)) [matchers]m = r.sub == p.sub && r.act == p.act