rules:
  - pattern: '**'
    access:
      admin: []
      read:
        - '*'
      write: []