Unable to deny subRoutes

[everythingspirals]

I'm trying to do something like this, however video/categories remains accessible. Am I doing something wrong?

{
     "resource": "video/*",
     "methods": "*",
     "action": "allow",
     "subRoutes" : [
	{
		"resource": "categories",
		"methods": "*",
		"action": "deny"
	}
     ]
}

[nyambati]

@everythingspirals Your main route * with allow permissions, this supersedes any rules or permissions for any subroute under videos. You might need to change it to something like below

{
     "resource": "video/",
     "methods": "*",
     "action": "allow",
     "subRoutes" : [
	{
		"resource": "categories",
		"methods": "*",
		"action": "deny"
	}
     ]
}

Let me know if this solves your problem.