rules: - pattern: "**" access: admin: [] read: - "*" write: []