rules:
  # Catalog: all projects access.
  - path: /project-manager/projects
    methods: [GET]
    groups:
      alw: [1]
      oa: ['*']
  # Catalog: Allow GET for /project/id/products, /project/id/product/imprints, /product/types etc
  - path: /project-manager/project/<*>
    methods: [GET]
    groups:
      alw: [1]
      oa: ['*']
  # Catalog: Allow GET product types
  - path: /project-manager/product/types
    methods: [GET]
    groups:
      alw: [1]
      oa: ['*']
  # Catalog: Create, Delete and edit project metadata.
  - path: /project-manager/project
    methods: [POST]
    groups:
      alw: [1]
      oa: ['*']
  - path: /project-manager/project/<int>
    methods: [PUT, DELETE]
    groups:
      alw: [1]
      oa: ['*']
  # Admin: Allow all.
  - path: <*>
    methods: ['*']
    groups:
      alw: [4]
      oa: ['*']