Thanks very much that explains a lot of my confusion. Do you know how to achieve my objective with just multiple allow policies. Do I have one allow policy to allow everything and another to allow a specific path only if claim is specific
claim? Something like
