code: func (f *aclFilter) allowService(service string) bool {
  	if service == "" {
  		return true
  	}
  
  	if !f.enforceVersion8 && service == structs.ConsulServiceID {
  		return true
  	}
  	return f.authorizer.ServiceRead(service)
  }
docs: // allowService is used to determine if a service is accessible for an ACL.