rules:
  - path: /notifications/subscribe
    methods: [POST]
    groups:
      alw: [1, 2, 3, 4, 5]

  - path: /notifications/unsubscribe
    methods: [POST]
    groups:
      alw: [1, 2, 3, 4, 5]

  # Admin: Allow all.
  - path: <*>
    methods: ['*']
    groups:
      alw: [4]
      oa: ['*']