Application scope ceiling rule
Application ID
Scope full path
Rule ID
Is this a deny rule
Pattern type
Priority (higher = evaluated first)
Resource pattern (glob)
Scope ID
Application scope ceiling rule