code: func (p *PolicyAuthorizer) IntentionRead(prefix string) bool {
  	// Check for an exact rule or catch-all
  	if rule, ok := getPolicy(prefix, p.intentionRules); ok {
  		pr := rule.(RulePolicy)
  		if allow, recurse := enforce(pr.aclPolicy, PolicyRead); !recurse {
  			return allow
  		}
  	}
  
  	// No matching rule, use the parent.
  	return p.parent.IntentionRead(prefix)
  }
docs: // IntentionRead checks if writing (creating, updating, or deleting) of an
  // intention is allowed.