code: final boolean isAllowedImplicitly(String subjectid, String resourcePath, String httpMethod) {
  		if (StringUtils.isBlank(subjectid) || StringUtils.isBlank(resourcePath) || StringUtils.isBlank(httpMethod)) {
  			return false;
  		}
  		if (resourcePath.endsWith("/" + subjectid)) {
  			// implicit permissions: a user can read/update/delete itself
  			return (httpMethod.equals("GET") || httpMethod.equals("PATCH") || httpMethod.equals("DELETE"));
  		}
  		return false;
  	}
docs: Check if a request comes from a signed in user who try to read/update themselves.
  @param subjectid subject id
  @param resourcePath resource path or object type
  @param httpMethod HTTP method name
  @return true if request is GET, PATCH or PUT and the subject id matches the object id