rules:
- pattern: '**'
  access:
    read:
    - '*'