rules:
  - path: /revenue
    methods: [GET]
    profiles:
      LabelProfile: [accounting]

  - path: /attachments
    methods: [GET]
    profiles:
      LabelProfile: [accounting]

  - path: /get-physical-reserves
    methods: [GET]
    profiles:
      LabelProfile: [accounting]

  - path: /attachment
    methods: [GET]
    profiles:
      LabelProfile: [accounting]

  - path: /payments
    methods: [GET]
    profiles:
      LabelProfile: [accounting]

  - path: /transaction_types
    methods: [GET]
    profiles:
      LabelProfile: [accounting]

  - path: /report
    methods: [GET, POST]
    profiles:
      LabelProfile: [accounting]

  - path: /report-link
    methods: [GET]
    profiles:
      LabelProfile: [accounting]

  - path: /reports
    methods: [GET]
    profiles:
      LabelProfile: [accounting]

  - path: /accounting_periods
    methods: [GET]
    profiles:
      LabelProfile: ['*']
      CollaboratorsProfile: [royalties]

  - path: /holds/<*>
    methods: ['*']
    profiles:
      OrchAdminProfile: ['*']

  # Admin: Allow all.
  - path: <*>
    methods: ['*']
    profiles:
      LabelProfile: [administrator]
      OrchAdminProfile: ['*']