rules:
  # Catalog user
  - path: /track/product/<int>/tracks<*>
    methods: [GET, POST, PATCH, PUT, DELETE]
    groups:
      alw: [1]
      oa: ['*']
  - path: /track/product/<int>/tracks
    methods: [DELETE]
    groups:
      alw: [1]
      oa: ['*']

  - path: /track/track/<int><*>
    methods: [GET, POST, PATCH, PUT, DELETE]
    groups:
      alw: [1]
      oa: ['*']
  - path: /track/track/samples/<int>
    methods: [GET, PATCH, DELETE]
    groups:
      alw: [1]

  # Admin: Allow all.
  - path: <*>
    methods: ['*']
    groups:
      alw: [4]
      oa: ['*']