permissions

A single access rule for filesystem operations.

With FilesystemBackend (directly or behind a CompositeBackend route), rules are matched against both the requested path and its symlink-resolved target; a deny on either blocks the call.