> "empty set means that everything is allowed". That is irregular. The natural meaning of empty set would be "nothing is allowed".    good point. i adjusted api model, now the empty fields means "nothing"