code: func (p *PolicyAuthorizer) ACLRead() bool {
  	if allow, recurse := enforce(p.aclRule, PolicyRead); !recurse {
  		return allow
  	}
  
  	return p.parent.ACLRead()
  }
docs: // ACLRead checks if listing of ACLs is allowed