rules:
  # Catalog, Analytics and Master Rights: distributor check allowed.
  - path: /account/distributor
    methods: [HEAD]
    groups:
      alw: [1, 2, 3, 4, 5, 6]
      oa: ['*']
  # Catalog, Marketing, analytic and accounting: identity check allowed.
  - path: /account/identity
    methods: [GET]
    groups:
      alw: [1, 2, 3, 4, 5, 6]
      oa: ['*']

  # Catalog: Is allowed to get subaccount details.
  - path: /account/subaccounts
    methods: [GET]
    groups:
      alw: [1, 2, 5, 4]
      oa: ['*']

  - path: /account/subaccount/<int>
    methods: [GET]
    groups:
      alw: [1, 2, 3, 4, 5, 6]
      oa: ['*']

  - path: /account/vendor/<int>
    methods: [GET]
    groups:
      alw: [1, 2, 3, 4, 5, 6]
      oa: ['*']

  # Admin: Allow all.
  - path: <*>
    methods: ['*']
    groups:
      alw: [4]
      oa: ['*']