code: def _forbidden(self, path, value):
      
      if path[0] == '/':
        path = path[1:]
      for rule in reversed(self.rules):
        if isinstance(rule[1], six.string_types):
          if fnmatch(path, rule[1]):
            return not rule[0]
        elif rule[1](path, value):
          return not rule[0]
      return True
docs: Is a stat forbidden? Goes through the rules to find one that
      applies. Chronologically newer rules are higher-precedence than
      older ones. If no rule applies, the stat is forbidden by default.