code: func (rulesMap accessRules) isAuthorized(reqs []*requestedAccess) bool {
  	for _, req := range reqs {
  		// Check rules for resource type and also check wildcard variations
  		// see: https://github.com/openshift/origin-web-common/blob/v3.10.0/src/services/authorizationService.js#L156
  		res := req.resource
  		allRes := &qualifiedResource{res.apiGroup, rulesReviewWildcard}
  		allGroup := &qualifiedResource{rulesReviewWildcard, res.resourceType}
  
  		// Check if all requested actions are permitted
  		for _, verb := range req.verbs {
  			if !containsVerb(rulesMap, res, verb) &&
  				!containsVerb(rulesMap, allResAllGroup, verb) &&
  				!containsVerb(rulesMap, allRes, verb) &&
  				!containsVerb(rulesMap, allGroup, verb) {
  				return false
  			}
  		}
  	}
  	return true
  }
docs: // Checks the subject rules review for the desired actions on resources