Appearance
rules which disallow access, if any rule evaluates to true, access is not granted (independent of allow and allowFromRelated)
true
allow
allowFromRelated