rules:
  # Catalog user
  - path: /product-physical/packaging
    methods: [GET]
    groups:
      alw: [1]
      oa: ['*']
  - path: /product-physical/product/<int>
    methods: [GET, PUT]
    groups:
      alw: [1]
      oa: ['*']
  - path: /product-physical/product/<int>/<*>
    methods: [GET, PUT, POST]
    groups:
      alw: [1]
      oa: ['*']
  - path: /product-physical/product
    methods: [POST]
    groups:
      alw: [1]
      oa: ['*']
  # Admin: Allow all.
  - path: <*>
    methods: ['*']
    groups:
      alw: [4]
      oa: ['*']