rules:
  - path: /holds/<*>
    methods: ['*']
    profiles:
      LabelProfile: ['catalog']

  - path: /upload-token<*>
    methods: [GET]
    profiles:
      LabelProfile: ['catalog']

  - path: <*>
    methods: ['*']
    profiles:
      LabelProfile: ['*']
      OrchAdminProfile: ['*']