+-------+-------+--------+-------------------------+
|       |       |        |          ORDER:         |
+-------+-------+--------+------------+------------+
|       | user  | action | deny allow | allow deny |
+-------+-------+--------+------------+------------+
| deny  | match | match  |    DENY    |    DENY    |
| deny  | match |  ALL   |    DENY    |    DENY?   |
| deny  |  ALL  | match  |    DENY    |    ALLOW   |
| deny  |  ALL  |  ALL   |    ----    |    ALLOW   |
| allow | match | match  |    ALLOW   |    ALLOW   |
| allow | match |  ALL   |    ALLOW?  |    ALLOW   |
| allow |  ALL  | match  |    DENY    |    ALLOW   |
| allow |  ALL  |  ALL   |    DENY    |    ----    |
+-------+-------+--------+------------+------------+

----   -- not considered
ALLOW  -- allow immediatly
ALLOW? -- allow if doesn't exist 'deny ALL action'
DENY   -- deny immediatly
DENY?  -- deny if doesn't exist 'allow ALL action'