code: func Allowed(req *http.Request, op Operation) bool {
  	for _, m := range modes {
  		if AllowedWithAuth(m, req, op) {
  			return true
  		}
  	}
  	return false
  }
docs: // Allowed returns whether the given request
  // has access to perform all the operations in op.