rules:
  - path: "status.json"
    user: "*"
    allow: ["READ"]