rules:
  # Catalog user: allow product level carveout endpoints.
  - path: /carveouts/carveout/<int>/territory/structured
    methods: [GET]
    groups:
      alw: [1]
      oa: ['*']
  - path: /carveouts/stores/grats
    methods: [GET]
    groups:
      alw: [1]
      oa: ['*']
  - path: /carveouts/carveout/<int>/territory
    methods: [PUT]
    groups:
      alw: [1]
      oa: ['*']
  # Admin: Allow all.
  - path: <*>
    methods: ['*']
    groups:
      alw: [4]
      oa: ['*']