anchor.diff:  
   [width="75%",options="header"]
   |==========================
  -| This Path                      | Results in these Resources Being Ignored 
  +| This Path                      | Results in these Resources Being Ignored
   | (empty)                        | Access to all resources is allowed
   | /customers                     | Denies access to all customer information
   | /customers/.*/orders           | Denies access to all customer order information
  
positive.code: ==== JSONP Policy
  [[policy-jsonp]]
  ===== Description
  This policy turns a standard REST endpoint into a https://en.wikipedia.org/wiki/JSONP[JSONP] 
  compatible endpoint.  For example, a REST endpoint may typically return the following JSON
  data:
  
  
negative.code: to the API.  Each rule consists of a regular expression pattern, an HTTP verb, and the role that an
  authenticated user must possess in order for access to be granted.
  
  TIP: It's *very* important to note that this policy must be configured *after* one of the standard
  apiman authentication policies (e.g. the BASIC Authentication policy or the Keycloak OAuth Policy).
  The reason is that an Authentication policy is responsible for extracting the authenticated user's
  roles, which is data that is required for the Authorization Policy to do its work.
  
  * *rules* (array) : Array of rules - each rule is applied only if it matches the current request.
  